General
- Target 2026-02-02_608f24c38bba03af4763192ccca11dc3_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 82.3MB
- Sample260202-jpr83sbw4e
- SHA256 04dc9ccbe789d401f10195a284a3ab3dc5c6a66447e386a63bf1ee318cc204d1
- MD5 608f24c38bba03af4763192ccca11dc3
- SHA1 01072d230672639e919cd1c94e5cf0f4fc49db82
- SHA512 a4ae7090cba161934e0e1bc995f6c6ad8ab85de52e39e3ceb80f721130f3267953fb16abcea8187a4eea744553340ecc1b32f55d74882fa3cb4cd20fc9e9a8ef
- SSDEEP 1572864:Dq+yGeMMgADawZvc/wPTmVMNySc/JUNnT16+V7UUJNnHUBbcNCk:VyYAvZ2QcMNySc/iFk+tUUJKcN
- TLSH T1CD1833CE9F71488AE91F753795E06E63C7E1B8BC064149C51BD009302EBB6DEE27A5B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-02-02_608f24c38bba03af4763192ccca11dc3_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260130-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-02-02_608f24c38bba03af4763192ccca11dc3_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11-20260130-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-02-02_608f24c38bba03af4763192ccca11dc3_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 82.3MB
- SHA256 04dc9ccbe789d401f10195a284a3ab3dc5c6a66447e386a63bf1ee318cc204d1
- MD5 608f24c38bba03af4763192ccca11dc3
- SHA1 01072d230672639e919cd1c94e5cf0f4fc49db82
- SHA512 a4ae7090cba161934e0e1bc995f6c6ad8ab85de52e39e3ceb80f721130f3267953fb16abcea8187a4eea744553340ecc1b32f55d74882fa3cb4cd20fc9e9a8ef
- SSDEEP 1572864:Dq+yGeMMgADawZvc/wPTmVMNySc/JUNnT16+V7UUJNnHUBbcNCk:VyYAvZ2QcMNySc/iFk+tUUJKcN
- TLSH T1CD1833CE9F71488AE91F753795E06E63C7E1B8BC064149C51BD009302EBB6DEE27A5B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.