2026-11-01_843a51b58c5cd52781505e4736eb0aae_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-01_843a51b58c5cd52781505e4736eb0aae_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc
Size 7.1MB
Sample261102-tnt2dsff38
SHA256 b4a22484a3e5e57173f2dfdc1f41447183f1fc5216459f7c1edc1e067def77c7
MD5 843a51b58c5cd52781505e4736eb0aae
SHA1 e1ee262d287eadc9de1798e35ff84c692931ba45
SHA512 e396f95263ecdb7a07f17b230d0a696ffc294adade5fc4302a6959cb9bb76ec69aaeb7faeff873e7e135f73896a27039d2c42df3768aadcd4572f13e07807cec
SSDEEP 98304:S6NkDrSuODmb9jzUeCUmL+PblOX9D9hlPGhoJu3hTUTYK9NIBCX7jEqmOVmyhT3b:rA3ODkjzUezmL+PBOtrVt06l/
TLSH
T17E76C005A7E504A4E877EF34C96AA323DAB1B8526730C10F439946121F73EA2DF6F716
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-01_843a51b58c5cd52781505e4736eb0aae_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc

File Explorer

2026-11-01_843a51b58c5cd52781505e4736eb0aae_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc

.exe 7.1MB

2026-11-01_843a51b58c5cd52781505e4736eb0aae_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc

IMPHASH 9df12f6d190632f3605cf8a74a5d84bf
SHA256 b4a22484a3e5e57173f2dfdc1f41447183f1fc5216459f7c1edc1e067def77c7
MD5 843a51b58c5cd52781505e4736eb0aae
SHA1 e1ee262d287eadc9de1798e35ff84c692931ba45
SHA512 e396f95263ecdb7a07f17b230d0a696ffc294adade5fc4302a6959cb9bb76ec69aaeb7faeff873e7e135f73896a27039d2c42df3768aadcd4572f13e07807cec
SSDEEP 98304:S6NkDrSuODmb9jzUeCUmL+PblOX9D9hlPGhoJu3hTUTYK9NIBCX7jEqmOVmyhT3b:rA3ODkjzUezmL+PBOtrVt06l/
TLSH
T17E76C005A7E504A4E877EF34C96AA323DAB1B8526730C10F439946121F73EA2DF6F716
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

45060

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

TranslateMessage LoadCursorA FillRect ScreenToClient MessageBoxW GetClientRect GetWindowTextW SetWindowTextW SetWindowRgn EndPaint BeginPaint DrawTextW SetLayeredWindowAttributes ShowWindow DestroyWindow CreateWindowExW RegisterClassW PostQuitMessage DefWindowProcW SendMessageA DispatchMessageA GetMessageA

gdi32

CreateFontW MoveToEx SetTextColor SetBkMode SetBkColor SelectObject RoundRect LineTo Ellipse DeleteObject CreateSolidBrush CreateRoundRectRgn CreatePen

comctl32

ord17

comdlg32

GetOpenFileNameW GetSaveFileNameW

shell32

ShellExecuteW

kernel32

CreateFileW ReadConsoleW GetProcessHeap FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle HeapSize WriteConsoleW SetEndOfFile HeapReAlloc SetFilePointerEx GetFileSizeEx GetTempPathW CloseHandle CreateProcessW GetModuleFileNameW BeginUpdateResourceW UpdateResourceW EndUpdateResourceW GetCurrentThreadId EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection QueryPerformanceCounter ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive WakeAllConditionVariable EncodePointer DecodePointer MultiByteToWideChar WideCharToMultiByte LCMapStringEx GetSystemTimeAsFileTime RtlUnwind GetModuleHandleW GetProcAddress GetStringTypeW GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetCurrentProcessId InitializeSListHead IsDebuggerPresent GetStartupInfoW ReadFile RtlPcToFileHeader RaiseException RtlUnwindEx GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW GetStdHandle WriteFile ExitProcess HeapFree HeapAlloc GetFileType FlsAlloc FlsGetValue FlsSetValue FlsFree VirtualProtect LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetConsoleOutputCP GetConsoleMode

Name

.text

Size

175KB

Virtual Size

174KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

77KB

Virtual Size

77KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-01_843a51b58c5cd52781505e4736eb0aae_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc

user32

gdi32

comctl32

comdlg32

shell32

kernel32

generic