General
- Target 2026-07-31_4acbcb16be72b8de075d530c1db19897_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 18.9MB
- Sample260801-byncgsvdpc
- SHA256 fd851745bb79b1a99655a2fcfddcccbe84a86f85b2587b860e3256b2c3fb4c80
- MD5 4acbcb16be72b8de075d530c1db19897
- SHA1 a4d722eeb2f91cc9d7bfaa7a00b98c6048a8c3c9
- SHA512 a5dd6d71a1e320927f002367f486d37e99d11042d6703a1d84445aede704f92681dc463a945f457d7295bc2fe4e4a2833366647569794eb7e0c90ec2ad836665
- SSDEEP 393216:BF+ldV276SsRzXFMuVFLICMw1r+8ADtAigoGax0asQpBa13eDX2BpABC:OljSYGub8CMw1LgtAiXGaxeQPQ3eKBKB
- TLSH T1741733088B91D9CFFAB9453C1D71FA2991F371C20BB282BB07A115CB1A1BED50D7A563
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-07-31_4acbcb16be72b8de075d530c1db19897_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_4acbcb16be72b8de075d530c1db19897_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_4acbcb16be72b8de075d530c1db19897_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 18.9MB
- SHA256 fd851745bb79b1a99655a2fcfddcccbe84a86f85b2587b860e3256b2c3fb4c80
- MD5 4acbcb16be72b8de075d530c1db19897
- SHA1 a4d722eeb2f91cc9d7bfaa7a00b98c6048a8c3c9
- SHA512 a5dd6d71a1e320927f002367f486d37e99d11042d6703a1d84445aede704f92681dc463a945f457d7295bc2fe4e4a2833366647569794eb7e0c90ec2ad836665
- SSDEEP 393216:BF+ldV276SsRzXFMuVFLICMw1r+8ADtAigoGax0asQpBa13eDX2BpABC:OljSYGub8CMw1LgtAiXGaxeQPQ3eKBKB
- TLSH T1741733088B91D9CFFAB9453C1D71FA2991F371C20BB282BB07A115CB1A1BED50D7A563
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.