df857152b1163a808f4f394daa6f4a1a582fd2342ad43f778297f69a39e66ef8

General

Target
2026-08-25_c931e5572e3e7070005027ccb2307e85_blankgrabber_glassworm_icedid_luca-stealer_njrat
Size 24.2MB
Sample260826-llmwass1e1
SHA256 df857152b1163a808f4f394daa6f4a1a582fd2342ad43f778297f69a39e66ef8
MD5 c931e5572e3e7070005027ccb2307e85
SHA1 fcf46bfc8ceecf575d1cb1f498f6ba82a373966b
SHA512 d38f7f2cd2886cb64e7dedb49bc10396a29f94c4d021d70f17cd8feadaa9edb71b3b6275e59cf7f5c2d41800bdb656fdaa3e3347ef73db44b9d1f434532202f8
SSDEEP 786432:pr84WrnqNuC4hav4bsat5ICe8qzCwtAHVz3PW6y:orqNuC40v4jc8qOwe1z3PW6
TLSH
T1664733493B5211E5FAD9B17E9972C581B2E465811F60CFBF0B8427BA3F130D80D3AAD9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

Malware Config

Targets

- Target
  2026-08-25_c931e5572e3e7070005027ccb2307e85_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 24.2MB
- SHA256 df857152b1163a808f4f394daa6f4a1a582fd2342ad43f778297f69a39e66ef8
- MD5 c931e5572e3e7070005027ccb2307e85
- SHA1 fcf46bfc8ceecf575d1cb1f498f6ba82a373966b
- SHA512 d38f7f2cd2886cb64e7dedb49bc10396a29f94c4d021d70f17cd8feadaa9edb71b3b6275e59cf7f5c2d41800bdb656fdaa3e3347ef73db44b9d1f434532202f8
- SSDEEP 786432:pr84WrnqNuC4hav4bsat5ICe8qzCwtAHVz3PW6y:orqNuC40v4jc8qOwe1z3PW6
- TLSH
  T1664733493B5211E5FAD9B17E9972C581B2E465811F60CFBF0B8427BA3F130D80D3AAD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

defense_evasion discovery spyware stealer
- Enumerates VirtualBox DLL files
- Enumerates VirtualBox registry keys
  defense_evasion
- Looks for VirtualBox Guest Additions in registry
  defense_evasion
- Looks for VirtualBox drivers on disk
  defense_evasion
- Looks for VMWare Tools registry key
  defense_evasion
- Looks for VMWare drivers on disk
  defense_evasion
- Looks for VMWare services registry key.
  defense_evasion
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2