General
- Target 2026-09-20_ef2e7a6ab5ed27f5562d540365ed4ade_blankgrabber_coinminer_glassworm_icedid_ngrbot_njrat_stealc
- Size 9.5MB
- Sample260920-2qphpafk8x
- SHA256 64952402556ae8a0eee90c67d8c04ac6204b5a508dfbb7992754f8c2e515dc2b
- MD5 ef2e7a6ab5ed27f5562d540365ed4ade
- SHA1 4df6f1b5e79f244072272f5a5c47c89ab6f30b2b
- SHA512 9cbeace33f4f53eada5603bf0d572b7b70e9f41fb647cd06d2c3216b6eb939ecaa98ef89c1bbde08c73082d8ba10899414df65a16cbbdb4711ce157ef63640c4
- SSDEEP 98304:Lev3LWULLX+ZKteVQUYE96jOzumrUNekktV6Thsx+34f:CjWoLX+ZKteVQUYHOSmrUNekktuo1
- TLSH T14CA68C15A37800E8D4ABC2B8C7465153D771784A13B0ABDF0A90AEA52F27EF51F7B712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-20_ef2e7a6ab5ed27f5562d540365ed4ade_blankgrabber_coinminer_glassworm_icedid_ngrbot_njrat_stealc.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-20_ef2e7a6ab5ed27f5562d540365ed4ade_blankgrabber_coinminer_glassworm_icedid_ngrbot_njrat_stealc.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-20_ef2e7a6ab5ed27f5562d540365ed4ade_blankgrabber_coinminer_glassworm_icedid_ngrbot_njrat_stealc
- Size 9.5MB
- SHA256 64952402556ae8a0eee90c67d8c04ac6204b5a508dfbb7992754f8c2e515dc2b
- MD5 ef2e7a6ab5ed27f5562d540365ed4ade
- SHA1 4df6f1b5e79f244072272f5a5c47c89ab6f30b2b
- SHA512 9cbeace33f4f53eada5603bf0d572b7b70e9f41fb647cd06d2c3216b6eb939ecaa98ef89c1bbde08c73082d8ba10899414df65a16cbbdb4711ce157ef63640c4
- SSDEEP 98304:Lev3LWULLX+ZKteVQUYE96jOzumrUNekktV6Thsx+34f:CjWoLX+ZKteVQUYHOSmrUNekktuo1
- TLSH T14CA68C15A37800E8D4ABC2B8C7465153D771784A13B0ABDF0A90AEA52F27EF51F7B712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key