General
- Target 2026-08-08_215bc1ca43afc2cf74054350b0cd9353_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 58.2MB
- Sample260808-2r2jmswbpe
- SHA256 a83daecee454b04be3f66d2ae3ddb3b591e413d163fff73d5deedebb8b1a23fb
- MD5 215bc1ca43afc2cf74054350b0cd9353
- SHA1 9032915a3a5c0383d9f8045445c3cd4974932820
- SHA512 13bbb01e4cc7a4ca4214bbe6ff852e95587e114922b6685848222684d1005534b271c21a697582eeb2a9a6bd4b77cf7296cb9d99d3100dc31d265afdc0d380bc
- SSDEEP 1572864:8qrTIAikXJVrvo2pUg9NoX0RpQPhu+O73odyn13P:9pv7ig9NXGcVN
- TLSH T159D733A13F0642D1F9E7413E5490962571E5B8F2AFA893EF12F805872C672D64C3C7AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-08_215bc1ca43afc2cf74054350b0cd9353_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_215bc1ca43afc2cf74054350b0cd9353_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_215bc1ca43afc2cf74054350b0cd9353_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 58.2MB
- SHA256 a83daecee454b04be3f66d2ae3ddb3b591e413d163fff73d5deedebb8b1a23fb
- MD5 215bc1ca43afc2cf74054350b0cd9353
- SHA1 9032915a3a5c0383d9f8045445c3cd4974932820
- SHA512 13bbb01e4cc7a4ca4214bbe6ff852e95587e114922b6685848222684d1005534b271c21a697582eeb2a9a6bd4b77cf7296cb9d99d3100dc31d265afdc0d380bc
- SSDEEP 1572864:8qrTIAikXJVrvo2pUg9NoX0RpQPhu+O73odyn13P:9pv7ig9NXGcVN
- TLSH T159D733A13F0642D1F9E7413E5490962571E5B8F2AFA893EF12F805872C672D64C3C7AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.