General
- Target 2026-08-03_0e13a150127a237d96f7caec5aee7c3d_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 74.8MB
- Sample260804-d1t9xscc67
- SHA256 c68b8e7d0000c526988e80d2ebccb6c437a1f72b45e8283b22e12efa20c1a6fd
- MD5 0e13a150127a237d96f7caec5aee7c3d
- SHA1 9e6ebf47b3707197a698ac772bf052f872adf645
- SHA512 0ff31e2af5aaf74c2f1b63f16574e8f2319cc202062940dc950c435531b46ac0a2a3e1744c3a11480ffa6338b393994e5a2a7641776ab10fd4ff824978aca548
- SSDEEP 1572864:GVXGMK4XR3b9CHSCU/+UyPlKFWta7KZ3iIOK4hg6amp12IVVzu:ggYRSSC++Uy9sMa7KtL4hg6lp12wzu
- TLSH T1020833097E89019FD6F92B3453E6C30B96E468EB8776809FA5F505030CB3FF899356A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-03_0e13a150127a237d96f7caec5aee7c3d_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_0e13a150127a237d96f7caec5aee7c3d_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_0e13a150127a237d96f7caec5aee7c3d_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 74.8MB
- SHA256 c68b8e7d0000c526988e80d2ebccb6c437a1f72b45e8283b22e12efa20c1a6fd
- MD5 0e13a150127a237d96f7caec5aee7c3d
- SHA1 9e6ebf47b3707197a698ac772bf052f872adf645
- SHA512 0ff31e2af5aaf74c2f1b63f16574e8f2319cc202062940dc950c435531b46ac0a2a3e1744c3a11480ffa6338b393994e5a2a7641776ab10fd4ff824978aca548
- SSDEEP 1572864:GVXGMK4XR3b9CHSCU/+UyPlKFWta7KZ3iIOK4hg6amp12IVVzu:ggYRSSC++Uy9sMa7KtL4hg6lp12wzu
- TLSH T1020833097E89019FD6F92B3453E6C30B96E468EB8776809FA5F505030CB3FF899356A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.