Analysis
- max time kernel
150s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
29/10/2026, 18:05
Static task
static1
Behavioral task
behavioral1
Sample
2026-10-29_008aebb1fc73501f43fae520d00639e7_blankgrabber_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-29_008aebb1fc73501f43fae520d00639e7_blankgrabber_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-10-29_008aebb1fc73501f43fae520d00639e7_blankgrabber_icedid_luca-stealer_njrat_stealc.exe
- Size 10.1MB
- Sample261029-wpdrxadv8y
- SHA256 41e0f5bed1801d300cee6bdc0e08a6da5db698b1e65d70677a5819f3f1a2d10a
- MD5 008aebb1fc73501f43fae520d00639e7
- SHA1 605193c08e0b51998de9f574caea3182eeb28a66
- SHA512 30a21157fb708454f881d8e1f3bba4c0e01af8762a5bf579af8edcf89ad4a6a5c0e4678874f191a66abcf979c98e3b23ff1b39f70e72404a15dda192447f617e
- SSDEEP 196608:73MrCjq0j7AzQ4ZgEyVpUPoAOedPq1NUwaFvn9+ThBJF/XeV:KCjv7AzQPEy6fOeAh+vn9Kfzi
- TLSH T106B6F11C276C41A8F5BED53D4FB7214380E275A6AB6450FB4AB4160FBB227C40CB9B9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 4136 wrote to memory of 4944 4136 2026-10-29_008aebb1fc73501f43fae520d00639e7_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 88
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-29_008aebb1fc73501f43fae520d00639e7_blankgrabber_icedid_luca-stealer_njrat_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-29_008aebb1fc73501f43fae520d00639e7_blankgrabber_icedid_luca-stealer_njrat_stealc.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:4136 -
C:\Users\Admin\AppData\Local\Temp\2026-10-29_008aebb1fc73501f43fae520d00639e7_blankgrabber_icedid_luca-stealer_njrat_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-29_008aebb1fc73501f43fae520d00639e7_blankgrabber_icedid_luca-stealer_njrat_stealc.exe" __i4j_windel "C:\Users\Admin\AppData\Local\install4j\t\i4dBBD5.tmp"2⤵PID:4944
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\install4j\t\i4dBBD5.tmp
- Size 502B
- SHA256 d6aac3e7862bb4ad9a58ae5cb05bd2ca2ead4abee2035f40f30f97712e7b7ca1
- MD5 ae6db4ba265b4043fc6ab8c333e85b2f
- SHA1 0fdeabd68d3e8d13d22a47c5815b1c220e22b009
- SHA512 28560b463dc42d653e644dff5004a2410fd9c99edf4adfbc9516785ee8cc9e99bb394fa7ffe009d41e2c6d6f1885db458f1c0d293b387a58ff4d71c069577466
- TLSH T1DDF0A723A6F41062B7BB5E427DF2A4668A797CF23909D91C10C4124D8CE0FA0995477B
- MD5 SHA1 SHA512 TLSH