General
- Target 2026-07-31_67bdc62f14e5cac6e2095307d6ce4701_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 18.8MB
- Sample260731-3teckaae76
- SHA256 f6b6f829b61d008d3cc3be6ab0adf10efeefaa28474c43fdaa481d336dea5520
- MD5 67bdc62f14e5cac6e2095307d6ce4701
- SHA1 617a96330556b19aa27928c4ef71dbd395470f8b
- SHA512 c561c831d4d56b98f4c84d422ee5d0531dbf716103454157c9c7035c58f796d9c9a759c6fd66a84f412364fe6aa01e4e1b7741239e18ee3914b0c11d2c52c39c
- SSDEEP 393216:JVJLHEgIfUKOcR1ROPsZg2KeybBK4fa6HsFKlaS3buYUgNw:7VE58KPR1RrLXoXao5USru7
- TLSH T125173399D3F00D72E9BB953B15990522F3F1713447A0C9EF1B9483262FAB2E51A3A371
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-07-31_67bdc62f14e5cac6e2095307d6ce4701_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_67bdc62f14e5cac6e2095307d6ce4701_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_67bdc62f14e5cac6e2095307d6ce4701_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 18.8MB
- SHA256 f6b6f829b61d008d3cc3be6ab0adf10efeefaa28474c43fdaa481d336dea5520
- MD5 67bdc62f14e5cac6e2095307d6ce4701
- SHA1 617a96330556b19aa27928c4ef71dbd395470f8b
- SHA512 c561c831d4d56b98f4c84d422ee5d0531dbf716103454157c9c7035c58f796d9c9a759c6fd66a84f412364fe6aa01e4e1b7741239e18ee3914b0c11d2c52c39c
- SSDEEP 393216:JVJLHEgIfUKOcR1ROPsZg2KeybBK4fa6HsFKlaS3buYUgNw:7VE58KPR1RrLXoXao5USru7
- TLSH T125173399D3F00D72E9BB953B15990522F3F1713447A0C9EF1B9483262FAB2E51A3A371
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.