General
- Target 2026-08-27_c7091b3a388513ed16f9fab2f7258ed8_blankgrabber_coinminer_glassworm_icedid_ngrbot_njrat_stealc
- Size 9.5MB
- Sample260827-kll4bssamh
- SHA256 d64cd442abee149f01c6ab41ff024120fbe449831b9306dc440312a58b6651ae
- MD5 c7091b3a388513ed16f9fab2f7258ed8
- SHA1 86219b6e6de572f8a10ff7c812cf801ef13765f7
- SHA512 e423a40ba706920a86d302e763698d1db44b88a0daa7bf4cddbc274790d98c5f822529af7f80b2f6c5796fa8f9298b671f381455c815cc8b59b29803eb91e485
- SSDEEP 196608:uI7Tfw24KUPkFZo7UQCIUKaZE6Cu5RoXh:uCTfw24KUPkFu7UQCIreE8R2
- TLSH T1ADA67C16E37800E8D4AAC2B8C7465157D771744A13B0ABDF1A90AEE12F37EE51E7B702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-27_c7091b3a388513ed16f9fab2f7258ed8_blankgrabber_coinminer_glassworm_icedid_ngrbot_njrat_stealc.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-27_c7091b3a388513ed16f9fab2f7258ed8_blankgrabber_coinminer_glassworm_icedid_ngrbot_njrat_stealc.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_c7091b3a388513ed16f9fab2f7258ed8_blankgrabber_coinminer_glassworm_icedid_ngrbot_njrat_stealc
- Size 9.5MB
- SHA256 d64cd442abee149f01c6ab41ff024120fbe449831b9306dc440312a58b6651ae
- MD5 c7091b3a388513ed16f9fab2f7258ed8
- SHA1 86219b6e6de572f8a10ff7c812cf801ef13765f7
- SHA512 e423a40ba706920a86d302e763698d1db44b88a0daa7bf4cddbc274790d98c5f822529af7f80b2f6c5796fa8f9298b671f381455c815cc8b59b29803eb91e485
- SSDEEP 196608:uI7Tfw24KUPkFZo7UQCIUKaZE6Cu5RoXh:uCTfw24KUPkFu7UQCIreE8R2
- TLSH T1ADA67C16E37800E8D4AAC2B8C7465157D771744A13B0ABDF1A90AEE12F37EE51E7B702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks for any installed AV software in registry
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.