General
- Target 2026-07-20_2404c4267a0b89f663e98f098692b6f9_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 32.9MB
- Sample260720-mc95xag17y
- SHA256 7a80adb9991748d05db53b6e51d7aeb6dbe80bf0eb08ec0aeaedacf37ddc3181
- MD5 2404c4267a0b89f663e98f098692b6f9
- SHA1 c3be86213b895792599d0a822b26c04ed63f5297
- SHA512 9eecca7dfe1960b5974b96eca8648dcf8891fa5830e5cd49ecc5e784ff9726c6e89a4a66b73472922e3f308ce0fdcfbeb33a3ab9d5d491443caaf80589aa4666
- SSDEEP 786432:X2G4TLcNOgMPHJFpxLKvuToWAGWrYMc3CzkMgEHFt/L:cTIA7JFpo0oZ7vc3CHgElhL
- TLSH T1F97733698AB01DE6F985813698724225F2F369302F61D98F17CD0BA93FB7198483E735
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-07-20_2404c4267a0b89f663e98f098692b6f9_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_2404c4267a0b89f663e98f098692b6f9_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_2404c4267a0b89f663e98f098692b6f9_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 32.9MB
- SHA256 7a80adb9991748d05db53b6e51d7aeb6dbe80bf0eb08ec0aeaedacf37ddc3181
- MD5 2404c4267a0b89f663e98f098692b6f9
- SHA1 c3be86213b895792599d0a822b26c04ed63f5297
- SHA512 9eecca7dfe1960b5974b96eca8648dcf8891fa5830e5cd49ecc5e784ff9726c6e89a4a66b73472922e3f308ce0fdcfbeb33a3ab9d5d491443caaf80589aa4666
- SSDEEP 786432:X2G4TLcNOgMPHJFpxLKvuToWAGWrYMc3CzkMgEHFt/L:cTIA7JFpo0oZ7vc3CHgElhL
- TLSH T1F97733698AB01DE6F985813698724225F2F369302F61D98F17CD0BA93FB7198483E735
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.