General
- Target 2026-07-10_a4aa9f8b2bc535cdee253593f84f0361_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 22.1MB
- Sample260710-15eflaey3t
- SHA256 6a6951da6035e9a274ef64b11a502b4c18d78ae9d80eb4c6c26e683d0a72b466
- MD5 a4aa9f8b2bc535cdee253593f84f0361
- SHA1 77ab093d569946f19a765050e48885a538fbd5af
- SHA512 eafbc7b1b56d0d0485b5b960fb5a29ba67674315fdd772bba47997a089ab79170ad065d67fec5002d81fcff989e164c2d54c2b3ba1a5ed5aecc5f370879401c7
- SSDEEP 393216:F6mdOzLNAwtbxW8kLLnJwNYw+0ZuC6hHTodRGkXE9v9AaxIhNzLxACfdU95:F6LGw/W8kPnJl0gCs0LhXgiaxENzbf69
- TLSH T19A3733E733C588A9FB9A93309552029622A23C655B74C19F8BF47C932D732F09A35377
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-07-10_a4aa9f8b2bc535cdee253593f84f0361_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_a4aa9f8b2bc535cdee253593f84f0361_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_a4aa9f8b2bc535cdee253593f84f0361_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 22.1MB
- SHA256 6a6951da6035e9a274ef64b11a502b4c18d78ae9d80eb4c6c26e683d0a72b466
- MD5 a4aa9f8b2bc535cdee253593f84f0361
- SHA1 77ab093d569946f19a765050e48885a538fbd5af
- SHA512 eafbc7b1b56d0d0485b5b960fb5a29ba67674315fdd772bba47997a089ab79170ad065d67fec5002d81fcff989e164c2d54c2b3ba1a5ed5aecc5f370879401c7
- SSDEEP 393216:F6mdOzLNAwtbxW8kLLnJwNYw+0ZuC6hHTodRGkXE9v9AaxIhNzLxACfdU95:F6LGw/W8kPnJl0gCs0LhXgiaxENzbf69
- TLSH T19A3733E733C588A9FB9A93309552029622A23C655B74C19F8BF47C932D732F09A35377
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.