General
- Target 2026-08-04_c222c647d831c871539796dd8c3754f3_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 69.1MB
- Sample260804-rlsz7sseld
- SHA256 90886f500c88ea4161cae67f2eefe9f921c71ece278ee71ee10c254690fdca62
- MD5 c222c647d831c871539796dd8c3754f3
- SHA1 1c35f4816c6ea3221c4da58f073cd84b9a44bdf5
- SHA512 03f9a88b7ff85b276e99959b477e205f1967c99a086b76f985c2202fd98ae77925d566e6ddf9d1da49e255d558266c57d3850fcd6c3769cfce8d223cc16b3922
- SSDEEP 1572864:REWrWO3P3R8fNknAnZ2yOogqTcaNH21A/QNN1rx82iQSydJsev3:REWrT/h8fNknAnIdA7lx0r/iQSydl
- TLSH T164F733DA7F4471C5F58F13778086D92B1EA0EB4C670B442397F81C723A572EA996AB30
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-04_c222c647d831c871539796dd8c3754f3_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_c222c647d831c871539796dd8c3754f3_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_c222c647d831c871539796dd8c3754f3_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 69.1MB
- SHA256 90886f500c88ea4161cae67f2eefe9f921c71ece278ee71ee10c254690fdca62
- MD5 c222c647d831c871539796dd8c3754f3
- SHA1 1c35f4816c6ea3221c4da58f073cd84b9a44bdf5
- SHA512 03f9a88b7ff85b276e99959b477e205f1967c99a086b76f985c2202fd98ae77925d566e6ddf9d1da49e255d558266c57d3850fcd6c3769cfce8d223cc16b3922
- SSDEEP 1572864:REWrWO3P3R8fNknAnZ2yOogqTcaNH21A/QNN1rx82iQSydJsev3:REWrT/h8fNknAnIdA7lx0r/iQSydl
- TLSH T164F733DA7F4471C5F58F13778086D92B1EA0EB4C670B442397F81C723A572EA996AB30
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.