General
- Target 2026-08-09_b791c3b24ee06853e94d41fef9915d5f_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 20.5MB
- Sample260809-tknp7s1eqe
- SHA256 165bbcc2ab9d4b3ae3a83dee77557c069fc02ff7022dad118a34839611f8d410
- MD5 b791c3b24ee06853e94d41fef9915d5f
- SHA1 5d072556b657b4c0989350d2926c5d4c97c1c83c
- SHA512 d3ec33b5102277d15746b9a319b32c3e0790194fc07580fa2d4c13b8cebfcd257b0b11c6fcf228d012767085178db5c20ba004570843a24c2c4b787c7a04b8f3
- SSDEEP 393216:EZqYFoSgIfUKOcR1yUdq1B77rhOzCQAEHsn4qSEj0pisN2:4qYJ58KPR1yUg1JtOzVgzSO0ps
- TLSH T1BA2733812B810912F9DB723965D48B63D2F071641B6189AF0BF04A653EB72F1EF3A7D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-09_b791c3b24ee06853e94d41fef9915d5f_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_b791c3b24ee06853e94d41fef9915d5f_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 20.5MB
- SHA256 165bbcc2ab9d4b3ae3a83dee77557c069fc02ff7022dad118a34839611f8d410
- MD5 b791c3b24ee06853e94d41fef9915d5f
- SHA1 5d072556b657b4c0989350d2926c5d4c97c1c83c
- SHA512 d3ec33b5102277d15746b9a319b32c3e0790194fc07580fa2d4c13b8cebfcd257b0b11c6fcf228d012767085178db5c20ba004570843a24c2c4b787c7a04b8f3
- SSDEEP 393216:EZqYFoSgIfUKOcR1yUdq1B77rhOzCQAEHsn4qSEj0pisN2:4qYJ58KPR1yUg1JtOzVgzSO0ps
- TLSH T1BA2733812B810912F9DB723965D48B63D2F071641B6189AF0BF04A653EB72F1EF3A7D1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.