General
- Target 2026-07-12_fa9d7d9e19c61f070568141e33f0a86b_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 14.6MB
- Sample260712-jxhdvags4s
- SHA256 e17034075b8c7504eb0f731984881a68517c06458a5cf16095889be7c5815b45
- MD5 fa9d7d9e19c61f070568141e33f0a86b
- SHA1 0155c84785b045885598c44b13d4d41be2331e51
- SHA512 cd9736dcf6dc3e3f6323c3e37bf3a5c00581be5d25f366fd2a75f0d6cabcfbe9d2dea7610f2d404dffbcdeb0ff9e6eb9ad7fecc44c2624530eef6e9b8f096ca4
- SSDEEP 393216:y85vziRddqmdQJlQIF3MnG3OLDl5BQjwStc243j/3HN2:15vziBDdQb3MGOsZ4T3t2
- TLSH T1B5F63397239918EBD4A29037849BF6D8D731BD558B30D54B83A42A9B1E133E4383FF94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-07-12_fa9d7d9e19c61f070568141e33f0a86b_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_fa9d7d9e19c61f070568141e33f0a86b_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_fa9d7d9e19c61f070568141e33f0a86b_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 14.6MB
- SHA256 e17034075b8c7504eb0f731984881a68517c06458a5cf16095889be7c5815b45
- MD5 fa9d7d9e19c61f070568141e33f0a86b
- SHA1 0155c84785b045885598c44b13d4d41be2331e51
- SHA512 cd9736dcf6dc3e3f6323c3e37bf3a5c00581be5d25f366fd2a75f0d6cabcfbe9d2dea7610f2d404dffbcdeb0ff9e6eb9ad7fecc44c2624530eef6e9b8f096ca4
- SSDEEP 393216:y85vziRddqmdQJlQIF3MnG3OLDl5BQjwStc243j/3HN2:15vziBDdQb3MGOsZ4T3t2
- TLSH T1B5F63397239918EBD4A29037849BF6D8D731BD558B30D54B83A42A9B1E133E4383FF94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.