General
- Target 2026-09-10_afa66d4dc8d294eaaf6ecae6d5273bdf_blankgrabber_icedid_luca-stealer_njrat
- Size 2.9MB
- Sample260910-n8lymagg39
- SHA256 8da388c7f73fd839c3ea91b9829d06611a4489917ed227daf5956370c345e83a
- MD5 afa66d4dc8d294eaaf6ecae6d5273bdf
- SHA1 4ec1aea341f56b2cb4b4b91349b81d6c191c180d
- SHA512 a55c38dc383f4a0272be499be9776186c7c1d72d17505879cf5453dc56495bf2c88dada2ed6c891a12b5baf02e1f71bcc0c572c8e069f1fa5d21d979c031d2c8
- SSDEEP 49152:X42+N95fUnYyAfd/LKydunkoeby+1bK2tnp/CXjKXi0aj3JWkZTaDmg27RnWGj:I55mey++TaD527BWG
- TLSH T1FDE59E6E66A405FCD1EBC1BACA4ADD13D772740F13B0A75F07A185622F5B2208A7D723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-10_afa66d4dc8d294eaaf6ecae6d5273bdf_blankgrabber_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_afa66d4dc8d294eaaf6ecae6d5273bdf_blankgrabber_icedid_luca-stealer_njrat
- Size 2.9MB
- SHA256 8da388c7f73fd839c3ea91b9829d06611a4489917ed227daf5956370c345e83a
- MD5 afa66d4dc8d294eaaf6ecae6d5273bdf
- SHA1 4ec1aea341f56b2cb4b4b91349b81d6c191c180d
- SHA512 a55c38dc383f4a0272be499be9776186c7c1d72d17505879cf5453dc56495bf2c88dada2ed6c891a12b5baf02e1f71bcc0c572c8e069f1fa5d21d979c031d2c8
- SSDEEP 49152:X42+N95fUnYyAfd/LKydunkoeby+1bK2tnp/CXjKXi0aj3JWkZTaDmg27RnWGj:I55mey++TaD527BWG
- TLSH T1FDE59E6E66A405FCD1EBC1BACA4ADD13D772740F13B0A75F07A185622F5B2208A7D723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1