General
- Target 2026-10-02_235ef77a2f593a4b7ab77c6c1d0765f8_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc
- Size 20.7MB
- Sample261003-tdjsnssapf
- SHA256 eead74a5642bbdc627c4c23e622c9e4aaba68f14ca5b8d1cd67e222ac7cf87ff
- MD5 235ef77a2f593a4b7ab77c6c1d0765f8
- SHA1 8a6a5b30f6b7453f60ead0bdfe64522e9a053989
- SHA512 9499ecd2eda7cb43d0e225ee317255ebbd293872a9c138ea5c11a51512a0cd838d5a97adafd1784cd6a0e13dba41b91e3d303563a482b75ab5e3f9abf4371510
- SSDEEP 393216:XLQWS+MYUZpGLkzuEy1GIs2xEGnZkJcVv:XbSXEH11HaG2J6
- TLSH T10E27D02662BC01E9D0B7D279CA434517F772785543B09BDB09A482F90F63AE46EBFB01
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-02_235ef77a2f593a4b7ab77c6c1d0765f8_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-02_235ef77a2f593a4b7ab77c6c1d0765f8_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-02_235ef77a2f593a4b7ab77c6c1d0765f8_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc
- Size 20.7MB
- SHA256 eead74a5642bbdc627c4c23e622c9e4aaba68f14ca5b8d1cd67e222ac7cf87ff
- MD5 235ef77a2f593a4b7ab77c6c1d0765f8
- SHA1 8a6a5b30f6b7453f60ead0bdfe64522e9a053989
- SHA512 9499ecd2eda7cb43d0e225ee317255ebbd293872a9c138ea5c11a51512a0cd838d5a97adafd1784cd6a0e13dba41b91e3d303563a482b75ab5e3f9abf4371510
- SSDEEP 393216:XLQWS+MYUZpGLkzuEy1GIs2xEGnZkJcVv:XbSXEH11HaG2J6
- TLSH T10E27D02662BC01E9D0B7D279CA434517F772785543B09BDB09A482F90F63AE46EBFB01
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1