General
- Target 2026-10-26_ea7e53572c2b21f4203628ae551c894a_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat
- Size 74.7MB
- Sample261027-d1keqaas6v
- SHA256 3ec93faddf7ac49289302223fda73b61ec4565a54c3e2cf2af0dc93ac6c6ded3
- MD5 ea7e53572c2b21f4203628ae551c894a
- SHA1 707fd839b46a20eabacb8fe8de9c711781b02843
- SHA512 1dc7f61c9a93353400c0ed2d48fad3cd543c205beacd7b07e25a27b3fb3d349090dbe88aa3722d43a26ab87343124f4721efdc5a79481d662a60d4f0189f9f9b
- SSDEEP 1572864:6jqEfz0CBvgngQx8QcO7Ri3Y7gGYBPl19Gf21HbwIFiEB/c9sq:glz0KvgMP38edGfWwCNU
- TLSH T1450833654402067FE8A28332BAE1D206DE11FC652679DFA2CFC94348FD775E89835F86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Behavioral task
behavioral1
Sample
2026-10-26_ea7e53572c2b21f4203628ae551c894a_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_ea7e53572c2b21f4203628ae551c894a_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_ea7e53572c2b21f4203628ae551c894a_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat
- Size 74.7MB
- SHA256 3ec93faddf7ac49289302223fda73b61ec4565a54c3e2cf2af0dc93ac6c6ded3
- MD5 ea7e53572c2b21f4203628ae551c894a
- SHA1 707fd839b46a20eabacb8fe8de9c711781b02843
- SHA512 1dc7f61c9a93353400c0ed2d48fad3cd543c205beacd7b07e25a27b3fb3d349090dbe88aa3722d43a26ab87343124f4721efdc5a79481d662a60d4f0189f9f9b
- SSDEEP 1572864:6jqEfz0CBvgngQx8QcO7Ri3Y7gGYBPl19Gf21HbwIFiEB/c9sq:glz0KvgMP38edGfWwCNU
- TLSH T1450833654402067FE8A28332BAE1D206DE11FC652679DFA2CFC94348FD775E89835F86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Executes dropped EXE
-
Loads dropped DLL