General

  • Target
    2026-09-13_6a7b6b1a633bded955d4bd760f7c28b3_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat
  • Size 73.0MB
  • Sample260913-rhtsbszvbw
  • SHA256 df4ad8614a37f85685a55bf561c7034657ad87f31ae50d172360a0a3728760ce
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-09-13_6a7b6b1a633bded955d4bd760f7c28b3_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat
    • Size 73.0MB
    • SHA256 df4ad8614a37f85685a55bf561c7034657ad87f31ae50d172360a0a3728760ce
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects executables containing URLs to raw contents of a Github gist

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks