General
- Target 2026-08-18_9796048b3d21bcf3b3dd9da61c432464_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 26.9MB
- Sample260818-3a3aaasemg
- SHA256 636eb8952b0f5ea6f91c4818910f4551318388376117e29c150698b8e2e2c217
- MD5 9796048b3d21bcf3b3dd9da61c432464
- SHA1 c878aaa82b2e621d32368e55f50bee3ef4c44d4a
- SHA512 8a9191ed668283df0cd23e944a8d1b273898c72db908ccced7c4d252528abf846b661f7d141a6eccccf8d10368f04dc8c2291ede64df8025aea63e00e176635b
- SSDEEP 786432:g2G4TLcNODYxkOKvuToWAGW/YMc3GzlnnHF3/:XTIAMw0oZvvc3G5nlP
- TLSH T15D57335D66F029F6F997803AC9728226E2F378211F61D58F139C4BA92FB7284097D335
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-18_9796048b3d21bcf3b3dd9da61c432464_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_9796048b3d21bcf3b3dd9da61c432464_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_9796048b3d21bcf3b3dd9da61c432464_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 26.9MB
- SHA256 636eb8952b0f5ea6f91c4818910f4551318388376117e29c150698b8e2e2c217
- MD5 9796048b3d21bcf3b3dd9da61c432464
- SHA1 c878aaa82b2e621d32368e55f50bee3ef4c44d4a
- SHA512 8a9191ed668283df0cd23e944a8d1b273898c72db908ccced7c4d252528abf846b661f7d141a6eccccf8d10368f04dc8c2291ede64df8025aea63e00e176635b
- SSDEEP 786432:g2G4TLcNODYxkOKvuToWAGW/YMc3GzlnnHF3/:XTIAMw0oZvvc3G5nlP
- TLSH T15D57335D66F029F6F997803AC9728226E2F378211F61D58F139C4BA92FB7284097D335
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.