General
- Target 2026-07-05_b02062c6a66528261e8d3bc0de5dfa38_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 18.8MB
- Sample260705-c67a1agx2w
- SHA256 0db204ded9379dbb18352ec758e4dc504c27bc28902222c1108af5ea09be46b0
- MD5 b02062c6a66528261e8d3bc0de5dfa38
- SHA1 ede8935b0919de32338ea10b72270a2c46b17702
- SHA512 d0fbed8a836e91b4fe4ce6c5e711d5419a99da6875e612383a6723484113235b1584448f9354f1b6b5f3e963bebd6a36fd3b97573a8e8bc9ec8b89624720a194
- SSDEEP 393216:FgE1RkMdhi5Pxf+10Udq1B7AyRYgQ4WIIHsn4qSUQMpmi24:bjrhiJxm10Ug1Jc4WLgzSFMpt
- TLSH T17F17339402E10663F8D7F13A56B5C2A1E370F5706762858F0B689BA73DAB1E04D3F7A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-07-05_b02062c6a66528261e8d3bc0de5dfa38_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_b02062c6a66528261e8d3bc0de5dfa38_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_b02062c6a66528261e8d3bc0de5dfa38_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 18.8MB
- SHA256 0db204ded9379dbb18352ec758e4dc504c27bc28902222c1108af5ea09be46b0
- MD5 b02062c6a66528261e8d3bc0de5dfa38
- SHA1 ede8935b0919de32338ea10b72270a2c46b17702
- SHA512 d0fbed8a836e91b4fe4ce6c5e711d5419a99da6875e612383a6723484113235b1584448f9354f1b6b5f3e963bebd6a36fd3b97573a8e8bc9ec8b89624720a194
- SSDEEP 393216:FgE1RkMdhi5Pxf+10Udq1B7AyRYgQ4WIIHsn4qSUQMpmi24:bjrhiJxm10Ug1Jc4WLgzSFMpt
- TLSH T17F17339402E10663F8D7F13A56B5C2A1E370F5706762858F0B689BA73DAB1E04D3F7A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.