General
- Target 2026-08-09_b7ff35e229d52bb85ff46034bd48d8f8_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.1MB
- Sample260809-tkesas1eph
- SHA256 7d890dc687a69e1a2f81c6cbf9532568f0c0d3d4627d82ab88742e3c8a7f2fb1
- MD5 b7ff35e229d52bb85ff46034bd48d8f8
- SHA1 fb47342dd94a12077c37032762511e07a3d8bd70
- SHA512 685e5582ce2a121bed4e6679c8d700255422fff9713290b576e5f87b3afdd08046a523be878e24c2759df041aab742b9fb5120958f00cb1d8e08f084dec1ab59
- SSDEEP 196608:jhsqlGN6Aq7vtbW897GDr/x7eovq5XMP6PzFL1WVzzsEHskA4NqS2r4ZRjMF3ci:aq/1yNdq1B7GRzsEHsn4qS2cZpiB
- TLSH T102D6335682D30A76F8D7F13A56729692C2B3B5402B32D89F0B54426A3F7B2F15D3B780
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-09_b7ff35e229d52bb85ff46034bd48d8f8_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_b7ff35e229d52bb85ff46034bd48d8f8_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.1MB
- SHA256 7d890dc687a69e1a2f81c6cbf9532568f0c0d3d4627d82ab88742e3c8a7f2fb1
- MD5 b7ff35e229d52bb85ff46034bd48d8f8
- SHA1 fb47342dd94a12077c37032762511e07a3d8bd70
- SHA512 685e5582ce2a121bed4e6679c8d700255422fff9713290b576e5f87b3afdd08046a523be878e24c2759df041aab742b9fb5120958f00cb1d8e08f084dec1ab59
- SSDEEP 196608:jhsqlGN6Aq7vtbW897GDr/x7eovq5XMP6PzFL1WVzzsEHskA4NqS2r4ZRjMF3ci:aq/1yNdq1B7GRzsEHsn4qS2cZpiB
- TLSH T102D6335682D30A76F8D7F13A56729692C2B3B5402B32D89F0B54426A3F7B2F15D3B780
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.