General
- Target 2026-08-10_bf0e422fa2545ec78eff7fac0eb471d0_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 81.0MB
- Sample260810-cem32sde54
- SHA256 eaee4819cd34845df6712d4ab61350f56890a18d2f4637af256fad98f3ce29e9
- MD5 bf0e422fa2545ec78eff7fac0eb471d0
- SHA1 4b2f0fff8508443ea3a5e4f705a680a7991d128b
- SHA512 e9945905b45eb5a0d8d29433e218848d91367d79b9690fd6403aa9072d8f9d69e4044ac48caa7a83fbe7ef562b501be36d1f30cbd7eef7f950ef1414fe883db1
- SSDEEP 1572864:a9zzTbci+8PkxEWNWEXpwUb9jETHPQmMpnx9luHY7otnq/2OiIYoeTZTZh322wLq:a9jbUqkEWNNp3jcvPOn36WdeTpjG21
- TLSH T1AB1833C83B405C4AED9843371266D9295EA8F54D87DC844BA7F4381A2ECF2CD9E7EE41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-10_bf0e422fa2545ec78eff7fac0eb471d0_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_bf0e422fa2545ec78eff7fac0eb471d0_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_bf0e422fa2545ec78eff7fac0eb471d0_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 81.0MB
- SHA256 eaee4819cd34845df6712d4ab61350f56890a18d2f4637af256fad98f3ce29e9
- MD5 bf0e422fa2545ec78eff7fac0eb471d0
- SHA1 4b2f0fff8508443ea3a5e4f705a680a7991d128b
- SHA512 e9945905b45eb5a0d8d29433e218848d91367d79b9690fd6403aa9072d8f9d69e4044ac48caa7a83fbe7ef562b501be36d1f30cbd7eef7f950ef1414fe883db1
- SSDEEP 1572864:a9zzTbci+8PkxEWNWEXpwUb9jETHPQmMpnx9luHY7otnq/2OiIYoeTZTZh322wLq:a9jbUqkEWNNp3jcvPOn36WdeTpjG21
- TLSH T1AB1833C83B405C4AED9843371266D9295EA8F54D87DC844BA7F4381A2ECF2CD9E7EE41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.