General
- Target 2026-08-01_45bc1c42b1a655dc9329680bd2ae3fcc_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 47.7MB
- Sample260802-a8hz3sbb85
- SHA256 420fcf33996a979a00844c5096a2b23b4a6a47d762d264782db44b3399d222ce
- MD5 45bc1c42b1a655dc9329680bd2ae3fcc
- SHA1 d4aa6a3f37d58e01d58d257a630c71e3d9113e1e
- SHA512 a4724c9a8303e5cb1488270fad1673e564a16059324131729061b2121390d0837d1494f0983dab7b21bb9367dd6550ef2307c32be17c99570408773ec83c286c
- SSDEEP 786432:2ljSYGCMaW8NTeYWJq30ZChZEA8VP1U37u48MGh29+kvKNx9IKoVMsaxx147LEkf:yjS0W/YgqEZChGA1rx82NvQcesu4EkD4
- TLSH T1EAB733887B1A2297F4CF963C86F992339A953CDF17A380A786F44893079B1E19D71335
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-01_45bc1c42b1a655dc9329680bd2ae3fcc_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_45bc1c42b1a655dc9329680bd2ae3fcc_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_45bc1c42b1a655dc9329680bd2ae3fcc_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 47.7MB
- SHA256 420fcf33996a979a00844c5096a2b23b4a6a47d762d264782db44b3399d222ce
- MD5 45bc1c42b1a655dc9329680bd2ae3fcc
- SHA1 d4aa6a3f37d58e01d58d257a630c71e3d9113e1e
- SHA512 a4724c9a8303e5cb1488270fad1673e564a16059324131729061b2121390d0837d1494f0983dab7b21bb9367dd6550ef2307c32be17c99570408773ec83c286c
- SSDEEP 786432:2ljSYGCMaW8NTeYWJq30ZChZEA8VP1U37u48MGh29+kvKNx9IKoVMsaxx147LEkf:yjS0W/YgqEZChGA1rx82NvQcesu4EkD4
- TLSH T1EAB733887B1A2297F4CF963C86F992339A953CDF17A380A786F44893079B1E19D71335
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.