General
- Target 2026-08-17_6e60876e434ab8e5f9619638e1c0201c_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 18.0MB
- Sample260817-cl8ckaha84
- SHA256 d50e6c6cde222ecbbef888d83bcbe2991b4d2076928084f77557e44b53b3ecf8
- MD5 6e60876e434ab8e5f9619638e1c0201c
- SHA1 9624fc25fa823d2113a34f811b315e2bb6448985
- SHA512 72b647fb080bc1e42920c312e3966669f2fa855308ae9e387a29aac3d75f21852ed1e588432e531dafdf252bae0df743e932467d92363d0ce5935ae56252d3fe
- SSDEEP 393216:nZDW8xngzbMhAKlA6hOKQ01uC8DvV+53SM8+aLwqqf4exDbje5BpAO:5W8qzbWlA68P0MC2vV/M8+YV84cDbjeG
- TLSH T18517338877D109E4F8DAD23ED998C83B63A579120BA1C5CB07F91C610D731D8EDB6B62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-17_6e60876e434ab8e5f9619638e1c0201c_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_6e60876e434ab8e5f9619638e1c0201c_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_6e60876e434ab8e5f9619638e1c0201c_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 18.0MB
- SHA256 d50e6c6cde222ecbbef888d83bcbe2991b4d2076928084f77557e44b53b3ecf8
- MD5 6e60876e434ab8e5f9619638e1c0201c
- SHA1 9624fc25fa823d2113a34f811b315e2bb6448985
- SHA512 72b647fb080bc1e42920c312e3966669f2fa855308ae9e387a29aac3d75f21852ed1e588432e531dafdf252bae0df743e932467d92363d0ce5935ae56252d3fe
- SSDEEP 393216:nZDW8xngzbMhAKlA6hOKQ01uC8DvV+53SM8+aLwqqf4exDbje5BpAO:5W8qzbWlA68P0MC2vV/M8+YV84cDbjeG
- TLSH T18517338877D109E4F8DAD23ED998C83B63A579120BA1C5CB07F91C610D731D8EDB6B62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.