General
- Target 2026-11-01_843a51b58c5cd52781505e4736eb0aae_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc
- Size 7.1MB
- Sample261102-tnt2dsff38
- SHA256 b4a22484a3e5e57173f2dfdc1f41447183f1fc5216459f7c1edc1e067def77c7
Score
8/10
Malware Config
Targets
-
- Target 2026-11-01_843a51b58c5cd52781505e4736eb0aae_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc
- Size 7.1MB
- SHA256 b4a22484a3e5e57173f2dfdc1f41447183f1fc5216459f7c1edc1e067def77c7
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
-
Executes dropped EXE
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Hide Artifacts: Hidden Window
Windows that would typically be displayed when an application carries out an operation can be hidden.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Obfuscated Files or Information: Command Obfuscation
Adversaries may obfuscate content during command execution to impede detection.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1Defense Evasion
Hide Artifacts
1Hidden Window
1Obfuscated Files or Information
1Command Obfuscation
1