General
- Target 2026-08-06_2ec10ff79b3eebd998fe8df1db616e40_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 15.5MB
- Sample260807-baxagsdp5s
- SHA256 b9bc7f9045a3a90ff6dacf9bb4debae31e9e1bb56f71cb734950c2511a66073f
- MD5 2ec10ff79b3eebd998fe8df1db616e40
- SHA1 3f38a066d3afe850e86c890c40df53bf41bd9550
- SHA512 3acd261147e4a5473ab16773af1bdf4b0f92b2837eb46b994182d689c2aa75dd268559995990f6c075fc8362d6839000275237d960519f1908491ce1b81b7f19
- SSDEEP 393216:yVuEVNGsCz1tOPsZg2KezxK4UHsFhktlavDdGVsbYPo4olFZR:mxRg1trLXKJtUvssbIO5R
- TLSH T1E8F6335886E5485BECA7A83F49758163F3A2B4204B51C58F0BA8C7592F6F6F92C3F350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-06_2ec10ff79b3eebd998fe8df1db616e40_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_2ec10ff79b3eebd998fe8df1db616e40_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_2ec10ff79b3eebd998fe8df1db616e40_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 15.5MB
- SHA256 b9bc7f9045a3a90ff6dacf9bb4debae31e9e1bb56f71cb734950c2511a66073f
- MD5 2ec10ff79b3eebd998fe8df1db616e40
- SHA1 3f38a066d3afe850e86c890c40df53bf41bd9550
- SHA512 3acd261147e4a5473ab16773af1bdf4b0f92b2837eb46b994182d689c2aa75dd268559995990f6c075fc8362d6839000275237d960519f1908491ce1b81b7f19
- SSDEEP 393216:yVuEVNGsCz1tOPsZg2KezxK4UHsFhktlavDdGVsbYPo4olFZR:mxRg1trLXKJtUvssbIO5R
- TLSH T1E8F6335886E5485BECA7A83F49758163F3A2B4204B51C58F0BA8C7592F6F6F92C3F350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.