db68ae3739b1f1690e9b7e687fea44c6d89601596d10c6db837cc8f5b1a487be | Triage™

Login
Reports

Overview

overview

8

Static

static

3

2026-10-22...at.exe

windows10-2004-x64

8

2026-10-22...at.exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-22_d7fdf116cd6c402a4253c6d805439cd4_blankgrabber_glassworm_icedid_luca-stealer_njrat
Size 34.7MB
Sample261023-wn7nlaztcs
SHA256 db68ae3739b1f1690e9b7e687fea44c6d89601596d10c6db837cc8f5b1a487be
MD5 d7fdf116cd6c402a4253c6d805439cd4
SHA1 a372a47b3dce9173b947226bcf5e2923956bd38d
SHA512 4ef61a21d149b8b59f35d916387d3b9b4eb67f43cbdd2968fd9bb50f9a8392c87e72f22acf26299468b1ba951ff9feede74a6a0e40de947697fa100d2dcb6d9d
SSDEEP 786432:x2NgL8XMPBMc7D6J5ZGxFDmWKU09fjz6nhc7jjUcW+NjbVVu76w:EHkGcowFyWC9rz4hij5NN3p
TLSH
T1A18733E4B7D916E3FCB38B3C65B19C106322B0794B2590672657DAC12CA3B90673E79C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery execution exploit persistence pyinstaller

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

2026-10-22_d7fdf116cd6c402a4253c6d805439cd4_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

12 signatures

150 seconds

defense_evasion discovery execution exploit persistence

Behavioral task

behavioral2

Sample

2026-10-22_d7fdf116cd6c402a4253c6d805439cd4_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

12 signatures

150 seconds

defense_evasion discovery execution exploit persistence

Malware Config

Targets

- Target
  2026-10-22_d7fdf116cd6c402a4253c6d805439cd4_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 34.7MB
- SHA256 db68ae3739b1f1690e9b7e687fea44c6d89601596d10c6db837cc8f5b1a487be
- MD5 d7fdf116cd6c402a4253c6d805439cd4
- SHA1 a372a47b3dce9173b947226bcf5e2923956bd38d
- SHA512 4ef61a21d149b8b59f35d916387d3b9b4eb67f43cbdd2968fd9bb50f9a8392c87e72f22acf26299468b1ba951ff9feede74a6a0e40de947697fa100d2dcb6d9d
- SSDEEP 786432:x2NgL8XMPBMc7D6J5ZGxFDmWKU09fjz6nhc7jjUcW+NjbVVu76w:EHkGcowFyWC9rz4hij5NN3p
- TLSH
  T1A18733E4B7D916E3FCB38B3C65B19C106322B0794B2590672657DAC12CA3B90673E79C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery execution exploit persistence
- Disables RegEdit via registry modification
  defense_evasion
- Disables Task Manager via registry modification
  defense_evasion
- Possible privilege escalation attempt
  exploit
- Loads dropped DLL
- Modifies file permissions
  discovery
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

File and Directory Permissions Modification

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryexecutionexploitpersistence

behavioral2

defense_evasiondiscoveryexecutionexploitpersistence

© 2018-2026

Terms | Privacy