General
- Target 2026-08-01_1c9fc30309c0dc2e80980e01d4f40176_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 119.3MB
- Sample260801-12bwasyvft
- SHA256 156d347b90a70c0b16b6c6f5ee71cd3c842406ab33be6724d6ce383c558b4680
- MD5 1c9fc30309c0dc2e80980e01d4f40176
- SHA1 2717f267ff286458458995547b2368cd24f7740f
- SHA512 5969c035fed44a88af820a0242df7db6451528aec689414abd3ea3180afaf44225380903c20390fb594cb54dfe80fb71bd30fc7d01a7d1e60f85d3d03d2c3c33
- SSDEEP 3145728:a9itgYRPSC++6y9smKk8ni/h8fNknAnIdA7lxiS4pRhEpWEZCcK8:a9IxaC4y9sjkmiGfqdM40pW7
- TLSH T19F58334DAFC02486E5ED697B609EC813AEA1F74C539784564BB42CB3091B2D5DB3EE30
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-01_1c9fc30309c0dc2e80980e01d4f40176_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_1c9fc30309c0dc2e80980e01d4f40176_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_1c9fc30309c0dc2e80980e01d4f40176_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 119.3MB
- SHA256 156d347b90a70c0b16b6c6f5ee71cd3c842406ab33be6724d6ce383c558b4680
- MD5 1c9fc30309c0dc2e80980e01d4f40176
- SHA1 2717f267ff286458458995547b2368cd24f7740f
- SHA512 5969c035fed44a88af820a0242df7db6451528aec689414abd3ea3180afaf44225380903c20390fb594cb54dfe80fb71bd30fc7d01a7d1e60f85d3d03d2c3c33
- SSDEEP 3145728:a9itgYRPSC++6y9smKk8ni/h8fNknAnIdA7lxiS4pRhEpWEZCcK8:a9IxaC4y9sjkmiGfqdM40pW7
- TLSH T19F58334DAFC02486E5ED697B609EC813AEA1F74C539784564BB42CB3091B2D5DB3EE30
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.