General
- Target 2026-08-03_e2787b09d33a954cf37ea5e507d665bf_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 64.5MB
- Sample260804-k8fj3abr2z
- SHA256 1ada9647d86467dc3fb66b46589e5c56b712eeb8cf55f09b61aac09311470e9b
- MD5 e2787b09d33a954cf37ea5e507d665bf
- SHA1 e9da0aec105348bdb5307f94ffd526b43c98e7f4
- SHA512 69dc2bddd43f70a8a492682de6cbdc058b77a88c3116a641ffe0ea7c1d182237251e0a32baec4e2c3262e344e84f579274802aee42f569ea8ce9042d500d91c3
- SSDEEP 1572864:XTIAC74+vWlM9ojCrD4WWJvKSc/JUNnUr90oZ5Dq5jwNriL:XI7PelKbDSc/iFUJ1eR
- TLSH T1E4E733484E407C9BFC5DD1368BE28D55E97B682D39824A8E23E406793FA7788446FF31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-03_e2787b09d33a954cf37ea5e507d665bf_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_e2787b09d33a954cf37ea5e507d665bf_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_e2787b09d33a954cf37ea5e507d665bf_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 64.5MB
- SHA256 1ada9647d86467dc3fb66b46589e5c56b712eeb8cf55f09b61aac09311470e9b
- MD5 e2787b09d33a954cf37ea5e507d665bf
- SHA1 e9da0aec105348bdb5307f94ffd526b43c98e7f4
- SHA512 69dc2bddd43f70a8a492682de6cbdc058b77a88c3116a641ffe0ea7c1d182237251e0a32baec4e2c3262e344e84f579274802aee42f569ea8ce9042d500d91c3
- SSDEEP 1572864:XTIAC74+vWlM9ojCrD4WWJvKSc/JUNnUr90oZ5Dq5jwNriL:XI7PelKbDSc/iFUJ1eR
- TLSH T1E4E733484E407C9BFC5DD1368BE28D55E97B682D39824A8E23E406793FA7788446FF31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.