Analysis
- max time kernel
150s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
22/09/2026, 10:19
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe
- Size 6.7MB
- Sample260922-mcxvkstdkh
- SHA256 38ad23ccd19d3fb37631b806bd2c0b452bf04396fae5b049fc3b58e54cf4b366
- MD5 c21b7853755060712b0856c2ffa974d9
- SHA1 d3c0e7cb5521cd192b178b679dca95e7f79559ae
- SHA512 710a66b888de4da50b5e24d32ba950636177a26121792a6656fb9944fffc50d8abfb6011ff728394450de730f122fff7a2904fc222421d504eef5a64f105a1ba
- SSDEEP 98304:cfmc0cNnaBOajJlz7g4dlmI4hK0Y/sUCZhir:PCnXkLzSn9gsUoO
- TLSH T1B266E1C673F501BAD237C538C6AA9A22D631785523350FDF16984A7A2F271E01F3EB16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe Token: SeIncBasePriorityPrivilege 3312 2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-21_c21b7853755060712b0856c2ffa974d9_blankgrabber_icedid_luca-stealer_njrat_stealc.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:3312