General
- Target 2026-06-26_c4802f1d71239771b03abcb174269839_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 16.8MB
- Sample260629-ppc22se17k
- SHA256 814b83abd64c34b0002eeddc6c8303d9f2e5dd88b4e2e239f34a7c785a5cf999
- MD5 c4802f1d71239771b03abcb174269839
- SHA1 61abfca3fc48b9d83acd419053cc9565f8d1c26e
- SHA512 7a71a5ab9a1dc477df59fec18e6c147221c67e3e139004891cc1e2f10102301a5f9d23676104a5fa74368a1d220f3140e08f329385acb8f0f57e65f16f1bc094
- SSDEEP 393216:a85vzajTBU7OLcDYFxVHFFhnGCnGjyi2bjRoBaxXjR0PNlzQhelBptHX4M:N5vzYYOgDYFrHFFhnGCnkyi2nRQaxmPo
- TLSH T1AB073389A2D005C3EEE34939C8F7D920D7B8F96217A1C1CF83A556A52E231E6643DF74
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-06-26_c4802f1d71239771b03abcb174269839_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_c4802f1d71239771b03abcb174269839_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260618-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_c4802f1d71239771b03abcb174269839_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 16.8MB
- SHA256 814b83abd64c34b0002eeddc6c8303d9f2e5dd88b4e2e239f34a7c785a5cf999
- MD5 c4802f1d71239771b03abcb174269839
- SHA1 61abfca3fc48b9d83acd419053cc9565f8d1c26e
- SHA512 7a71a5ab9a1dc477df59fec18e6c147221c67e3e139004891cc1e2f10102301a5f9d23676104a5fa74368a1d220f3140e08f329385acb8f0f57e65f16f1bc094
- SSDEEP 393216:a85vzajTBU7OLcDYFxVHFFhnGCnGjyi2bjRoBaxXjR0PNlzQhelBptHX4M:N5vzYYOgDYFrHFFhnGCnkyi2nRQaxmPo
- TLSH T1AB073389A2D005C3EEE34939C8F7D920D7B8F96217A1C1CF83A556A52E231E6643DF74
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.