General
- Target 2026-06-01_32a1a405e0aa36ac89003e2c9237a94c_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 95.9MB
- Sample260601-rmxd1sft61
- SHA256 0adb2938e4f8d329b56f8255476494545b3ebf6e24f7a6905743e8206d23449f
- MD5 32a1a405e0aa36ac89003e2c9237a94c
- SHA1 bba4b6026502ac032c8ad0f6cf171f8616013b8f
- SHA512 6957967f3a71ced7e7b95e543d56df8991ed1807ce58ae61723927f94557e6ad340c4feb0a7988660b7629e80eef0a65828b85e3bd530754cdfc7df3337bb7e1
- SSDEEP 1572864:c1kJmLWwVqYB3OJyaA98PTVBexkzTe7t7sS+GAz8XBB92Flg3tSWX0Dk4sC0gwrO:c1sOWwVNtNCnqpIGQ8XBBIhdsC0gwFe
- TLSH T10928337EB6A8C36FD443B17DE0D7F95132B8B4549F2A4ABD71F5A5A21AC018188FF600
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-06-01_32a1a405e0aa36ac89003e2c9237a94c_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-01_32a1a405e0aa36ac89003e2c9237a94c_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-01_32a1a405e0aa36ac89003e2c9237a94c_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 95.9MB
- SHA256 0adb2938e4f8d329b56f8255476494545b3ebf6e24f7a6905743e8206d23449f
- MD5 32a1a405e0aa36ac89003e2c9237a94c
- SHA1 bba4b6026502ac032c8ad0f6cf171f8616013b8f
- SHA512 6957967f3a71ced7e7b95e543d56df8991ed1807ce58ae61723927f94557e6ad340c4feb0a7988660b7629e80eef0a65828b85e3bd530754cdfc7df3337bb7e1
- SSDEEP 1572864:c1kJmLWwVqYB3OJyaA98PTVBexkzTe7t7sS+GAz8XBB92Flg3tSWX0Dk4sC0gwrO:c1sOWwVNtNCnqpIGQ8XBBIhdsC0gwFe
- TLSH T10928337EB6A8C36FD443B17DE0D7F95132B8B4549F2A4ABD71F5A5A21AC018188FF600
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.