General
- Target 2026-08-20_e0b6b3a342b08d6c0e70363006a59649_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc
- Size 19.7MB
- Sample260820-xea4pswyhv
- SHA256 7e5b241ad83e3c34a0572fa8c0a82ce2f71fb31ba5d20026dc98234342483a28
- MD5 e0b6b3a342b08d6c0e70363006a59649
- SHA1 428b7644f115406a76d2f22803da523f6d792319
- SHA512 318fb05c96ceb03b605295d49a022ac8e0567be2e4a638a386818db63aa46a8a9ca1be88c2f2ec73ab2f5fc767709125e2473a37f3340b70e3f213e597db28d4
- SSDEEP 196608:cJ72b3fgMS5EwMBACr5S9BugsQO0UZuPzoGH0VFkqJSFPL:D3fgMEEwnuJZuPzo60zMF
- TLSH T16E278E1BA1E801DCD0BAD179CA9B8907EBB2B809037157DB06D085A62F77FE05E7D712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_e0b6b3a342b08d6c0e70363006a59649_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_e0b6b3a342b08d6c0e70363006a59649_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc
- Size 19.7MB
- SHA256 7e5b241ad83e3c34a0572fa8c0a82ce2f71fb31ba5d20026dc98234342483a28
- MD5 e0b6b3a342b08d6c0e70363006a59649
- SHA1 428b7644f115406a76d2f22803da523f6d792319
- SHA512 318fb05c96ceb03b605295d49a022ac8e0567be2e4a638a386818db63aa46a8a9ca1be88c2f2ec73ab2f5fc767709125e2473a37f3340b70e3f213e597db28d4
- SSDEEP 196608:cJ72b3fgMS5EwMBACr5S9BugsQO0UZuPzoGH0VFkqJSFPL:D3fgMEEwnuJZuPzo60zMF
- TLSH T16E278E1BA1E801DCD0BAD179CA9B8907EBB2B809037157DB06D085A62F77FE05E7D712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1