General
- Target 2026-08-09_c0e60e4b2034510de1ab59b90021acf1_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.1MB
- Sample260809-thjy8s1emc
- SHA256 d924a6a4af8960ac91568861c014a2a52d1a00b4fac22a3f5b9abd4aab64ce00
- MD5 c0e60e4b2034510de1ab59b90021acf1
- SHA1 404e617d6bfa907b6803bfdcf05594f507b30f7d
- SHA512 9a2ecd05738c350465f114bedb7bb6801ceb310cb0db7355a9107c24638bc3a4b2dc7888acd783926f81d618474ea3c2a926cb4e051b970782ba424628499694
- SSDEEP 196608:3hsqlGN6Aqff3tbW897GDr/x7eovq5XMP6PzFL1WVzzsEHskA4NqS2r4ZRjMF3ci:uqzf1yNdq1B7GRzsEHsn4qS2cZpiB
- TLSH T160D6335152C20936F9D7E23B5A719593C2B2B1406B32D89F0B64572A3FBB2F15D3BB80
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-09_c0e60e4b2034510de1ab59b90021acf1_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_c0e60e4b2034510de1ab59b90021acf1_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.1MB
- SHA256 d924a6a4af8960ac91568861c014a2a52d1a00b4fac22a3f5b9abd4aab64ce00
- MD5 c0e60e4b2034510de1ab59b90021acf1
- SHA1 404e617d6bfa907b6803bfdcf05594f507b30f7d
- SHA512 9a2ecd05738c350465f114bedb7bb6801ceb310cb0db7355a9107c24638bc3a4b2dc7888acd783926f81d618474ea3c2a926cb4e051b970782ba424628499694
- SSDEEP 196608:3hsqlGN6Aqff3tbW897GDr/x7eovq5XMP6PzFL1WVzzsEHskA4NqS2r4ZRjMF3ci:uqzf1yNdq1B7GRzsEHsn4qS2cZpiB
- TLSH T160D6335152C20936F9D7E23B5A719593C2B2B1406B32D89F0B64572A3FBB2F15D3BB80
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.