General
- Target 2026-08-04_4faaed0a9a96b48632cc04c05ec1c9be_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 18.7MB
- Sample260804-s9ctkadb64
- SHA256 94c4bfe1fb858da26d2d540b01ccc32f191509d3fab2e9a7f4119cf063458d6b
- MD5 4faaed0a9a96b48632cc04c05ec1c9be
- SHA1 d35d3d1d5011a3742c1519d76f86641a9bf21da4
- SHA512 621cfcebe25cd6313663c76d8fda0dbcd7942bca8210012fa02416fdb77ec40b750556d19b229662ea45c54ac18326589d86852f05574f53f398e60fee938e35
- SSDEEP 393216:d85vzauLICPYFxVHFFRW+tHjd515RyZU/0EyQvK34FrBOlefWVtAz:65vz7IkYFrHFFRW+NjvVyQSEBiefOtA
- TLSH T1BA173359A3F405E7F4E7443DC253C861A335F9926B72CADF03A095A12E63AE64938F60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-04_4faaed0a9a96b48632cc04c05ec1c9be_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_4faaed0a9a96b48632cc04c05ec1c9be_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_4faaed0a9a96b48632cc04c05ec1c9be_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 18.7MB
- SHA256 94c4bfe1fb858da26d2d540b01ccc32f191509d3fab2e9a7f4119cf063458d6b
- MD5 4faaed0a9a96b48632cc04c05ec1c9be
- SHA1 d35d3d1d5011a3742c1519d76f86641a9bf21da4
- SHA512 621cfcebe25cd6313663c76d8fda0dbcd7942bca8210012fa02416fdb77ec40b750556d19b229662ea45c54ac18326589d86852f05574f53f398e60fee938e35
- SSDEEP 393216:d85vzauLICPYFxVHFFRW+tHjd515RyZU/0EyQvK34FrBOlefWVtAz:65vz7IkYFrHFFRW+NjvVyQSEBiefOtA
- TLSH T1BA173359A3F405E7F4E7443DC253C861A335F9926B72CADF03A095A12E63AE64938F60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.