General
- Target 2026-07-05_40fbfb131f13affbef1d04c54cbaf7b8_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 64.9MB
- Sample260705-3evq1ab15r
- SHA256 a404ba04e936ca19f019385cd34e4f742fcfa815d5161fac852cba2a90e47ede
- MD5 40fbfb131f13affbef1d04c54cbaf7b8
- SHA1 1f8ef802a3b63b20e85d11a725d91e33e1b8f18a
- SHA512 463344f0b677386db47b821525916e6fc34418c25a7c45c91474d5268db1b1ad6e8dbb946ffaf26499a052e29266aa5138a7e7a39b57434138b4ac6e35085387
- SSDEEP 1572864:J9z00Ye3P3R8fNknAnZ2yOogqTcaNH21A/UbK4cNSMGWbLsdd:J9w0Ye/h8fNknAnIdA7lx/4cjDM
- TLSH T167E7339F6F81758AE65A823B5087DC2AFD61EA8D4107D4278794097F1F073E96A3EC30
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-05_40fbfb131f13affbef1d04c54cbaf7b8_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_40fbfb131f13affbef1d04c54cbaf7b8_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260629-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_40fbfb131f13affbef1d04c54cbaf7b8_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 64.9MB
- SHA256 a404ba04e936ca19f019385cd34e4f742fcfa815d5161fac852cba2a90e47ede
- MD5 40fbfb131f13affbef1d04c54cbaf7b8
- SHA1 1f8ef802a3b63b20e85d11a725d91e33e1b8f18a
- SHA512 463344f0b677386db47b821525916e6fc34418c25a7c45c91474d5268db1b1ad6e8dbb946ffaf26499a052e29266aa5138a7e7a39b57434138b4ac6e35085387
- SSDEEP 1572864:J9z00Ye3P3R8fNknAnZ2yOogqTcaNH21A/UbK4cNSMGWbLsdd:J9w0Ye/h8fNknAnIdA7lx/4cjDM
- TLSH T167E7339F6F81758AE65A823B5087DC2AFD61EA8D4107D4278794097F1F073E96A3EC30
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Drops desktop.ini file(s)
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.