General
- Target 2026-08-09_b70a043ec4af970cf4bbb93fb209a400_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 80.5MB
- Sample260809-cgxp9sgj4w
- SHA256 a8f927296d00d1a8acc717c751bb4e740c758f5167b81104d89f254caaff26cc
- MD5 b70a043ec4af970cf4bbb93fb209a400
- SHA1 80779ae0036353dcb6e6b5eca12f29e284cfd0ec
- SHA512 48b16c8484ae0608dd6bdc2bf76e167b709e281e3a340e3a37e5459c960173bed1466fe7f0e35231410ae4237668dc2a10388e975c81d57fd5565af0877d09e8
- SSDEEP 1572864:FvqHEWYW+UkeCimUydVkNUISYLloVHmjo/HY7otnq/29C5uoeQLlble341:RaEWYb7dKUfslsHmjeK5beQPe3
- TLSH T13D0833CD27C5185CF40643321592CB14AAE9B40D935DC98B57F82C372E632F9BABEE25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-09_b70a043ec4af970cf4bbb93fb209a400_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_b70a043ec4af970cf4bbb93fb209a400_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_b70a043ec4af970cf4bbb93fb209a400_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 80.5MB
- SHA256 a8f927296d00d1a8acc717c751bb4e740c758f5167b81104d89f254caaff26cc
- MD5 b70a043ec4af970cf4bbb93fb209a400
- SHA1 80779ae0036353dcb6e6b5eca12f29e284cfd0ec
- SHA512 48b16c8484ae0608dd6bdc2bf76e167b709e281e3a340e3a37e5459c960173bed1466fe7f0e35231410ae4237668dc2a10388e975c81d57fd5565af0877d09e8
- SSDEEP 1572864:FvqHEWYW+UkeCimUydVkNUISYLloVHmjo/HY7otnq/29C5uoeQLlble341:RaEWYb7dKUfslsHmjeK5beQPe3
- TLSH T13D0833CD27C5185CF40643321592CB14AAE9B40D935DC98B57F82C372E632F9BABEE25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.