General
- Target 2026-08-01_32c7fcbc4afbec26af2ee5286f31d27b_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 99.2MB
- Sample260801-d3q1aada42
- SHA256 edd1bc3861db3834f5eefea08fd9ec6387bdb4d1ef671f9c22248322e7990d15
- MD5 32c7fcbc4afbec26af2ee5286f31d27b
- SHA1 46c48aead73c28c3a721f5bd6899753173d55e52
- SHA512 b60a52af1f34950624e32b311bad4a167ac17ad3372878d08f2a1b41a6b1c4f7ab9262f781ffff542dff9d03666486abfe016d1868a49273d6611fa07741a108
- SSDEEP 1572864:7qrTIAie1ibdrAtfpSPIKpk8+vWlM9ojCrD4WWJvKSc/JUNnWB1v0oZgLCYTgu66:uZQRrAUCelKbDSc/iFWPcda3pq1
- TLSH T1AB3833455E826C4AE58CD13647E15F62C2B67DBD2D624B8763E00FAC3EB72C84C7A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-01_32c7fcbc4afbec26af2ee5286f31d27b_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_32c7fcbc4afbec26af2ee5286f31d27b_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_32c7fcbc4afbec26af2ee5286f31d27b_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 99.2MB
- SHA256 edd1bc3861db3834f5eefea08fd9ec6387bdb4d1ef671f9c22248322e7990d15
- MD5 32c7fcbc4afbec26af2ee5286f31d27b
- SHA1 46c48aead73c28c3a721f5bd6899753173d55e52
- SHA512 b60a52af1f34950624e32b311bad4a167ac17ad3372878d08f2a1b41a6b1c4f7ab9262f781ffff542dff9d03666486abfe016d1868a49273d6611fa07741a108
- SSDEEP 1572864:7qrTIAie1ibdrAtfpSPIKpk8+vWlM9ojCrD4WWJvKSc/JUNnWB1v0oZgLCYTgu66:uZQRrAUCelKbDSc/iFWPcda3pq1
- TLSH T1AB3833455E826C4AE58CD13647E15F62C2B67DBD2D624B8763E00FAC3EB72C84C7A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.