General
- Target 2026-10-22_a8252f08fdc5e5fbad297dfa741301c9_akira_blankgrabber_darkgate_elex_glassworm_luca-stealer_magniber_njrat
- Size 9.0MB
- Sample261024-bxjmxae12t
- SHA256 127033186d3202700739bc210aedc45e5249be50155286547a5dc9b9d5f38728
- MD5 a8252f08fdc5e5fbad297dfa741301c9
- SHA1 44d83dbf473aa7ac7f48afb4720397f7e94a1127
- SHA512 4bb3a91330bd7c57fbaaf9a64ba10f71f26a4c671c3b6e1bc18e3767f87eaec1922e9f9c7a4527ebc97ad5888dfc76788be763c950b6e5e1ae37b27b03810b27
- SSDEEP 98304:IJ5o2kdAsIuYKrOeIkQNUPm7DkiCp0G2EY9NfbZh81jAa0rUAMIucjcCqk8Lm:SipdA3uhjQB7Dks+Afv8xxKlTKL
- TLSH T16496E061B643C172D9C201F15929EBBA893CAD355B2504C7F3D07F69B9322C22A37A5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_a8252f08fdc5e5fbad297dfa741301c9_akira_blankgrabber_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe
Resource
win10v2004-20260911-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_a8252f08fdc5e5fbad297dfa741301c9_akira_blankgrabber_darkgate_elex_glassworm_luca-stealer_magniber_njrat
- Size 9.0MB
- SHA256 127033186d3202700739bc210aedc45e5249be50155286547a5dc9b9d5f38728
- MD5 a8252f08fdc5e5fbad297dfa741301c9
- SHA1 44d83dbf473aa7ac7f48afb4720397f7e94a1127
- SHA512 4bb3a91330bd7c57fbaaf9a64ba10f71f26a4c671c3b6e1bc18e3767f87eaec1922e9f9c7a4527ebc97ad5888dfc76788be763c950b6e5e1ae37b27b03810b27
- SSDEEP 98304:IJ5o2kdAsIuYKrOeIkQNUPm7DkiCp0G2EY9NfbZh81jAa0rUAMIucjcCqk8Lm:SipdA3uhjQB7Dks+Afv8xxKlTKL
- TLSH T16496E061B643C172D9C201F15929EBBA893CAD355B2504C7F3D07F69B9322C22A37A5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Loads dropped DLL
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1