General
- Target 2026-09-11_383acf2797b7920b44af316ceef9ff8f_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 87.0MB
- Sample260912-ngsl4aah35
- SHA256 31742b61d9936f36a878c6e2960d0a3233749e70a38ca3b1e27e7bab6d105366
- MD5 383acf2797b7920b44af316ceef9ff8f
- SHA1 e97d5b3e564ccd78aea5e5185bf62dcb9f662988
- SHA512 6c87a1222f88d8bd00a54cbbe98c6d5155dca7b7c8f4ed2674ec58ccc03aef01dcb194e1512910ed0212871120ce4c12b6e3a54afd45229fded2d6f93b16beda
- SSDEEP 1572864:48DkKam6efQ3QCtKMnrOyN4CaUDApN1W2ZcT4mWbV+05nCC2cZUY3hr4bPT+rqCv:48DkFeYACtKotPaDjlcmbroQZUsr+COi
- TLSH T17718330661E82489F46BE73DB05023703072B3665BD5E79712A4EE237CB37653E6BB42
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-11_383acf2797b7920b44af316ceef9ff8f_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-11_383acf2797b7920b44af316ceef9ff8f_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-11_383acf2797b7920b44af316ceef9ff8f_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 87.0MB
- SHA256 31742b61d9936f36a878c6e2960d0a3233749e70a38ca3b1e27e7bab6d105366
- MD5 383acf2797b7920b44af316ceef9ff8f
- SHA1 e97d5b3e564ccd78aea5e5185bf62dcb9f662988
- SHA512 6c87a1222f88d8bd00a54cbbe98c6d5155dca7b7c8f4ed2674ec58ccc03aef01dcb194e1512910ed0212871120ce4c12b6e3a54afd45229fded2d6f93b16beda
- SSDEEP 1572864:48DkKam6efQ3QCtKMnrOyN4CaUDApN1W2ZcT4mWbV+05nCC2cZUY3hr4bPT+rqCv:48DkFeYACtKotPaDjlcmbroQZUsr+COi
- TLSH T17718330661E82489F46BE73DB05023703072B3665BD5E79712A4EE237CB37653E6BB42
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Windows exceutables bypassing UAC using CMSTP COM interfaces. MITRE (T1218.003)
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.