General
- Target 2026-07-12_ffcfc8c37c9ed55511b170fde07a0f0e_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 18.1MB
- Sample260712-jv1gmsf19t
- SHA256 631fbda5d85b35221ec21ee93d711e055105070405011be56adf6d71e3602939
- MD5 ffcfc8c37c9ed55511b170fde07a0f0e
- SHA1 fcea761d2f49029ba23fe1aad82fda50167e16ca
- SHA512 5d0230f6354edc1040ca765ff604c0659c03c4a6340f083b2b03c60da1346d5eda4941bc85b220fa3e9065ccf45e0f8b9bf467920772776dc728ac59c728627c
- SSDEEP 393216:fqfVJExgtb5eorxD516OPsZg2KeqBK4OEHsF5laSqRbLvuziNFZ:fqdm0HrxD516rLXqDEUSkbSzK
- TLSH T1A41733588BE10867CC97643B547A0263F3B1B8FA07E0D95F1B9893273FB75D9683A250
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-07-12_ffcfc8c37c9ed55511b170fde07a0f0e_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_ffcfc8c37c9ed55511b170fde07a0f0e_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 18.1MB
- SHA256 631fbda5d85b35221ec21ee93d711e055105070405011be56adf6d71e3602939
- MD5 ffcfc8c37c9ed55511b170fde07a0f0e
- SHA1 fcea761d2f49029ba23fe1aad82fda50167e16ca
- SHA512 5d0230f6354edc1040ca765ff604c0659c03c4a6340f083b2b03c60da1346d5eda4941bc85b220fa3e9065ccf45e0f8b9bf467920772776dc728ac59c728627c
- SSDEEP 393216:fqfVJExgtb5eorxD516OPsZg2KeqBK4OEHsF5laSqRbLvuziNFZ:fqdm0HrxD516rLXqDEUSkbSzK
- TLSH T1A41733588BE10867CC97643B547A0263F3B1B8FA07E0D95F1B9893273FB75D9683A250
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Loads dropped DLL
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
Accesses cryptocurrency files/wallets, possible credential harvesting
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.