General
- Target 2026-06-28_f21df84098c63363cc9599944a5b1239_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 16.3MB
- Sample260628-wlsrnabs4q
- SHA256 3592072bdbe852d951f0a32a1578926a5730a43adf76bbc5bbc00ec14dfcd192
- MD5 f21df84098c63363cc9599944a5b1239
- SHA1 99579bd93617c2280d404b6cf713158b9a9227fb
- SHA512 a2eb002fc122b946ec9777c4534a7c534c12ce7a79f31ad915a21e9eb56bf939a973dc87cb24199c59e974176f4b035c720e0973f65a80600c814b2238c993b3
- SSDEEP 393216:YRoK86qKgIfUKOcwr6tZq5X486A+76HsxtEDweQjx1lO9:4U6qK58KPwr6tZq5o3AOowt7e2g
- TLSH T134073369A6C01C37E8D7623C9AB6CA62F2F176341B528DEF07E117353F63250443E6A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-06-28_f21df84098c63363cc9599944a5b1239_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_f21df84098c63363cc9599944a5b1239_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 16.3MB
- SHA256 3592072bdbe852d951f0a32a1578926a5730a43adf76bbc5bbc00ec14dfcd192
- MD5 f21df84098c63363cc9599944a5b1239
- SHA1 99579bd93617c2280d404b6cf713158b9a9227fb
- SHA512 a2eb002fc122b946ec9777c4534a7c534c12ce7a79f31ad915a21e9eb56bf939a973dc87cb24199c59e974176f4b035c720e0973f65a80600c814b2238c993b3
- SSDEEP 393216:YRoK86qKgIfUKOcwr6tZq5X486A+76HsxtEDweQjx1lO9:4U6qK58KPwr6tZq5o3AOowt7e2g
- TLSH T134073369A6C01C37E8D7623C9AB6CA62F2F176341B528DEF07E117353F63250443E6A9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.