General

  • Target
    2026-09-06_9255fa27c4eabd81e833b06b9016e9f0_blankgrabber_coinminer_glassworm_icedid_ngrbot_njrat_stealc
  • Size 9.4MB
  • Sample260906-2fdnfa1ygv
  • SHA256 93cda0acc43f8904f9b1a818c71533a2c07a67780a944cdfc48ebd4f114aa1b7
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-09-06_9255fa27c4eabd81e833b06b9016e9f0_blankgrabber_coinminer_glassworm_icedid_ngrbot_njrat_stealc
    • Size 9.4MB
    • SHA256 93cda0acc43f8904f9b1a818c71533a2c07a67780a944cdfc48ebd4f114aa1b7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks for any installed AV software in registry

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks