Analysis
- max time kernel
150s - max time network
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/08/2026, 23:04
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_f3447b4ba5e7bb6e0de1115c0f31ecd7_blankgrabber_coinminer_glassworm_helldown_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_f3447b4ba5e7bb6e0de1115c0f31ecd7_blankgrabber_coinminer_glassworm_helldown_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
General
- Target 2026-08-20_f3447b4ba5e7bb6e0de1115c0f31ecd7_blankgrabber_coinminer_glassworm_helldown_icedid_luca-stealer_njrat_stealc.exe
- Size 24.2MB
- Sample260820-22g8rabr21
- SHA256 e0a5529c620729db6d664b3e273106660103d4726954d9851ef4a891b4f07522
- MD5 f3447b4ba5e7bb6e0de1115c0f31ecd7
- SHA1 3369f45cc93336826cbe96f9cdeb86534aaeffb0
- SHA512 91216b677049e0cc2a26a6ca910696553a308abf748b43866067a54789bcf909e33e9df0a9acb93314a44b145ac5b0f4d5a307f34bec5e605ab0284f6ed6f3fb
- SSDEEP 393216:1jSjFnO5AYgzY4yAgmcTMPVj+NWE/MRJHDdNiN/wV:SO5AVzY1IjHDGwV
- TLSH T1D747AE6A72B400E9E1BBC079C6569507EBB27856137097CF09A04AB61F3BBF05E7E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 5392 2026-08-20_f3447b4ba5e7bb6e0de1115c0f31ecd7_blankgrabber_coinminer_glassworm_helldown_icedid_luca-stealer_njrat_stealc.exe 5392 2026-08-20_f3447b4ba5e7bb6e0de1115c0f31ecd7_blankgrabber_coinminer_glassworm_helldown_icedid_luca-stealer_njrat_stealc.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 5392 2026-08-20_f3447b4ba5e7bb6e0de1115c0f31ecd7_blankgrabber_coinminer_glassworm_helldown_icedid_luca-stealer_njrat_stealc.exe 5392 2026-08-20_f3447b4ba5e7bb6e0de1115c0f31ecd7_blankgrabber_coinminer_glassworm_helldown_icedid_luca-stealer_njrat_stealc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-20_f3447b4ba5e7bb6e0de1115c0f31ecd7_blankgrabber_coinminer_glassworm_helldown_icedid_luca-stealer_njrat_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-20_f3447b4ba5e7bb6e0de1115c0f31ecd7_blankgrabber_coinminer_glassworm_helldown_icedid_luca-stealer_njrat_stealc.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:5392