General
- Target 2026-07-17_ab0e5afb2b069bbf4bb7d58decaec1d0_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.2MB
- Sample260717-bc9ctsct6w
- SHA256 1ba1ccca9b98f6e68e5a7a7f1b39e1a31b83a39105a829a992280189f17dc41a
- MD5 ab0e5afb2b069bbf4bb7d58decaec1d0
- SHA1 d245b04d7093632b849467b32a364bd069d45426
- SHA512 5e7d69c886a3896c728a4f69231cb701599a24a810e46ab4216c866581e16c86955da5e7dd71e22f6f1f7f2686575fc7b579ecab1de08d3445f218d57e151ee9
- SSDEEP 393216:gq9WGx/hqAbdXQfM6R4RmhmH00LOHsnvDwH2BRI:gq9WGxdYMc3M00QgEHE
- TLSH T1ECE63365D7D104BAE8A2513D48348712E3B27D530BE2D9DF1BA80B293FB72F1583E265
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-07-17_ab0e5afb2b069bbf4bb7d58decaec1d0_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_ab0e5afb2b069bbf4bb7d58decaec1d0_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.2MB
- SHA256 1ba1ccca9b98f6e68e5a7a7f1b39e1a31b83a39105a829a992280189f17dc41a
- MD5 ab0e5afb2b069bbf4bb7d58decaec1d0
- SHA1 d245b04d7093632b849467b32a364bd069d45426
- SHA512 5e7d69c886a3896c728a4f69231cb701599a24a810e46ab4216c866581e16c86955da5e7dd71e22f6f1f7f2686575fc7b579ecab1de08d3445f218d57e151ee9
- SSDEEP 393216:gq9WGx/hqAbdXQfM6R4RmhmH00LOHsnvDwH2BRI:gq9WGxdYMc3M00QgEHE
- TLSH T1ECE63365D7D104BAE8A2513D48348712E3B27D530BE2D9DF1BA80B293FB72F1583E265
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.