Analysis
- max time kernel
150s - max time network
151s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
22/09/2026, 19:16
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-22_834688c2288fe81609b2259db3ac4cfa_blankgrabber_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-22_834688c2288fe81609b2259db3ac4cfa_blankgrabber_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
General
- Target 2026-09-22_834688c2288fe81609b2259db3ac4cfa_blankgrabber_icedid_luca-stealer_njrat_stealc.exe
- Size 4.5MB
- Sample260922-xy22jadf39
- SHA256 5417f4465602d536d70de6a30040e622ecbcfa2fd09cb38511a5b3c9de8f8532
- MD5 834688c2288fe81609b2259db3ac4cfa
- SHA1 4357566808b58b8c51bf24b653993d7a9da69322
- SHA512 339aa2174f8b8cddfea2c6ca8f69aa970137d7f8b0b39aeba2a9f708d462a757241b49c868cc39b606a68d897924ba6a8819327cac3980023dfa68f6cbf15ffd
- SSDEEP 98304:+kzzgj6ZERpbNukvyKpvzjbdgWSZW1HKfI5mE5g/u9W:+eHZ8zbXpRSZW1HfQX
- TLSH T136261209D6DB01F9CCB7C5FD8E869043D672B8460338D6EB02E197521FE7AE49A3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 4616 2026-09-22_834688c2288fe81609b2259db3ac4cfa_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 4616 2026-09-22_834688c2288fe81609b2259db3ac4cfa_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 4616 2026-09-22_834688c2288fe81609b2259db3ac4cfa_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 4616 2026-09-22_834688c2288fe81609b2259db3ac4cfa_blankgrabber_icedid_luca-stealer_njrat_stealc.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4616 2026-09-22_834688c2288fe81609b2259db3ac4cfa_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 4616 2026-09-22_834688c2288fe81609b2259db3ac4cfa_blankgrabber_icedid_luca-stealer_njrat_stealc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-22_834688c2288fe81609b2259db3ac4cfa_blankgrabber_icedid_luca-stealer_njrat_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-22_834688c2288fe81609b2259db3ac4cfa_blankgrabber_icedid_luca-stealer_njrat_stealc.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4616