General
- Target 2026-07-06_27f7ec2b888f4dbe44ae248a0e6e0a70_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 9.6MB
- Sample260707-fd79dah15s
- SHA256 363dc6264a6926d65303d474db595afbf7ce792a6353f60e3bdc94ac1a9b9137
- MD5 27f7ec2b888f4dbe44ae248a0e6e0a70
- SHA1 d9b733520822f417e08656a64322ab1720ac917d
- SHA512 8eb5b841f3f9b0e44c4cf342e35cee4ce9d00fd488cd812ec7dfc8f2972c6eb90e08ee3ea5c6aeadd8e8bab87f0b4854f4417b9d2c2bbb49736041021d0f445c
- SSDEEP 196608:6NI8LKUrsW4gXyTntTFqq8N3tzCMPWh1HsGXqrhpXFSFE7E:6e8LKUrGtZq5XzzC1HsGXq97SN
- TLSH T19FA6338893D018E7E897627C56B3D159E3E1B8111B22CCEF1792532D3FB76614839BAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Behavioral task
behavioral1
Sample
2026-07-06_27f7ec2b888f4dbe44ae248a0e6e0a70_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_27f7ec2b888f4dbe44ae248a0e6e0a70_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260706-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_27f7ec2b888f4dbe44ae248a0e6e0a70_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 9.6MB
- SHA256 363dc6264a6926d65303d474db595afbf7ce792a6353f60e3bdc94ac1a9b9137
- MD5 27f7ec2b888f4dbe44ae248a0e6e0a70
- SHA1 d9b733520822f417e08656a64322ab1720ac917d
- SHA512 8eb5b841f3f9b0e44c4cf342e35cee4ce9d00fd488cd812ec7dfc8f2972c6eb90e08ee3ea5c6aeadd8e8bab87f0b4854f4417b9d2c2bbb49736041021d0f445c
- SSDEEP 196608:6NI8LKUrsW4gXyTntTFqq8N3tzCMPWh1HsGXqrhpXFSFE7E:6e8LKUrGtZq5XzzC1HsGXq97SN
- TLSH T19FA6338893D018E7E897627C56B3D159E3E1B8111B22CCEF1792532D3FB76614839BAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables (downlaoders) containing URLs to raw contents of a paste
-
Executes dropped EXE
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.