General
- Target 2026-07-31_cda3e40f9bd2c45ee803c8ea19da4b12_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 56.9MB
- Sample260731-t65kvaweph
- SHA256 7f132746dfda4a03fdd8c29f59ad5ab21b349990a5116c937d7e336d4564a75d
- MD5 cda3e40f9bd2c45ee803c8ea19da4b12
- SHA1 bee80f3181961bc4789a29c07d6f0d794f615fd9
- SHA512 f7974d965dc15121b3b277a37c7340282e37b1cf8073a626d1e3497d3866d41392fdb7b001199f6825cb888bfa0bdbf744946b237c05b846174e3df0b645dcf6
- SSDEEP 1572864:cqrTIAikXJVrvo2pUg9NoX0RHNLrXDq52OdIVUaTod4iA3P:dpv7ig9NXHNL7e2jKe
- TLSH T102D73391BF464195F8D3513E59E28A2261E6F4F26A7487EF02E5024A2DB31D7083C7BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-07-31_cda3e40f9bd2c45ee803c8ea19da4b12_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_cda3e40f9bd2c45ee803c8ea19da4b12_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_cda3e40f9bd2c45ee803c8ea19da4b12_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 56.9MB
- SHA256 7f132746dfda4a03fdd8c29f59ad5ab21b349990a5116c937d7e336d4564a75d
- MD5 cda3e40f9bd2c45ee803c8ea19da4b12
- SHA1 bee80f3181961bc4789a29c07d6f0d794f615fd9
- SHA512 f7974d965dc15121b3b277a37c7340282e37b1cf8073a626d1e3497d3866d41392fdb7b001199f6825cb888bfa0bdbf744946b237c05b846174e3df0b645dcf6
- SSDEEP 1572864:cqrTIAikXJVrvo2pUg9NoX0RHNLrXDq52OdIVUaTod4iA3P:dpv7ig9NXHNL7e2jKe
- TLSH T102D73391BF464195F8D3513E59E28A2261E6F4F26A7487EF02E5024A2DB31D7083C7BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.