General
- Target 2026-05-25_a0ad43f29f816afc7c755dcbb05acdcc_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 21.9MB
- Sample260525-jpb7vsft71
- SHA256 3847df7f39054042cabbe9aad9c83d3476e991a9fc7b9dc6eb290e01582819c5
- MD5 a0ad43f29f816afc7c755dcbb05acdcc
- SHA1 c7935396965efb44c40161236ab91ecd77d129ca
- SHA512 ecda31fb74380344ff4c1bfee04ede10b92e34230bc093d7f858139f3b247414a9fc13fac2fe4f83c2f9d17d5e9f861ff34f258d9b90854846cb403981a20a09
- SSDEEP 393216:m1biodjs14bMgLc9zGdGthrLK0FiqrNtZq5XB6ZbcHsxtEDweDmxu8ClV/:f2G4TLcNOiVX4qrNtZq5ebewt7eSj4
- TLSH T11237334477C11496F8D76138ADD2C663A3E1B5302F60CADF1BEA0B692EB31C5883E765
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-05-25_a0ad43f29f816afc7c755dcbb05acdcc_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-25_a0ad43f29f816afc7c755dcbb05acdcc_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-25_a0ad43f29f816afc7c755dcbb05acdcc_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 21.9MB
- SHA256 3847df7f39054042cabbe9aad9c83d3476e991a9fc7b9dc6eb290e01582819c5
- MD5 a0ad43f29f816afc7c755dcbb05acdcc
- SHA1 c7935396965efb44c40161236ab91ecd77d129ca
- SHA512 ecda31fb74380344ff4c1bfee04ede10b92e34230bc093d7f858139f3b247414a9fc13fac2fe4f83c2f9d17d5e9f861ff34f258d9b90854846cb403981a20a09
- SSDEEP 393216:m1biodjs14bMgLc9zGdGthrLK0FiqrNtZq5XB6ZbcHsxtEDweDmxu8ClV/:f2G4TLcNOiVX4qrNtZq5ebewt7eSj4
- TLSH T11237334477C11496F8D76138ADD2C663A3E1B5302F60CADF1BEA0B692EB31C5883E765
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Drops startup file
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.