General
- Target 2026-07-16_027091d14e624f41520acdd607740ba7_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 60.3MB
- Sample260716-dh42eabz4m
- SHA256 cdeaa5d6117747607a1d37f425b5aec7dc5002368eabf9951e09d6db41cbabce
- MD5 027091d14e624f41520acdd607740ba7
- SHA1 b12e08a2d8aa9b8f22220d7d0b999c56452609be
- SHA512 df2cb8a06e6a33f76aaaba5cc5d47d24e0f97375d38c811358948de5511edb6fe88eac017a3cc8465f3b9eb41b426eb2f4c008fb5d225325bf475135f2713d05
- SSDEEP 1572864:z7n1XGMK4XR3bLSCU/+6yPl39EWxWsLzLf5f2ClGSMm74:zpgYRPSC++6y9tEWxLzL4mGi4
- TLSH T1BCD73350EA9C0887D99F21B594F0D346D6C374EF87B081A6427885478CABFE0FD7A768
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-07-16_027091d14e624f41520acdd607740ba7_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-16_027091d14e624f41520acdd607740ba7_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_027091d14e624f41520acdd607740ba7_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 60.3MB
- SHA256 cdeaa5d6117747607a1d37f425b5aec7dc5002368eabf9951e09d6db41cbabce
- MD5 027091d14e624f41520acdd607740ba7
- SHA1 b12e08a2d8aa9b8f22220d7d0b999c56452609be
- SHA512 df2cb8a06e6a33f76aaaba5cc5d47d24e0f97375d38c811358948de5511edb6fe88eac017a3cc8465f3b9eb41b426eb2f4c008fb5d225325bf475135f2713d05
- SSDEEP 1572864:z7n1XGMK4XR3bLSCU/+6yPl39EWxWsLzLf5f2ClGSMm74:zpgYRPSC++6y9tEWxLzL4mGi4
- TLSH T1BCD73350EA9C0887D99F21B594F0D346D6C374EF87B081A6427885478CABFE0FD7A768
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.