General
- Target 2026-08-17_dc07f0294c19d067f7978b38edb53ba8_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 35.5MB
- Sample260818-gss9faer31
- SHA256 b32be55b89e934ebddeb646f0b586d8172170c46f7eaeacf2d36c5f0685a6e1a
- MD5 dc07f0294c19d067f7978b38edb53ba8
- SHA1 7c867b8386d658179edfe2676338fd0c1b8da33b
- SHA512 04756ed1e0dd75f3e8cb17d698e2e7884ab3e01da488fbcdd7a3f2fad4d9e307f1b849b5ccd484d0acacbc6bf32de48e919239d5fb913a63dae11370e77064e6
- SSDEEP 786432:Hrv2G4TLcNOF/odmUJAH1hKvuToWAGW8kg1TMegzSNP/tG/l:4TIAF0JAH1k0oZQTRgzQ/tql
- TLSH T11C87335615D109A2FA8AC236CAA39576D3E375643F70894F078C82E63EB32D00D7E7B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Behavioral task
behavioral1
Sample
stealer_hardened.pyc
Resource
win10v2004-20260513-en
16 signatures
900 seconds
Behavioral task
behavioral2
Sample
stealer_hardened.pyc
Resource
win11ltsc2024-20260709-en
4 signatures
900 seconds
Malware Config
Targets
-
- Target stealer_hardened.pyc
- Size 57KB
- SHA256 31a01d68727670384f8187121b54f03e9b5c6c60bfcb94145009171eec6848ca
- MD5 e716ba9788ef421e5a6a3adf44baa637
- SHA1 84bc2c35ab7bca1987b95c4bda151fef0536b64a
- SHA512 daec1df0846a2300826db204ea5649a6d315d1ad338f61ce3def759c11b66ee1eace8b136d54f70b9ead0ebf9370d11f1d7f2dd38bd1d07f325e9f847ee5c42d
- SSDEEP 1536:QFkErQbc0kRpyQzoqq5RhsswtzxvJh8Qps:QFkQQbc0kRpyQzvq5RVwtFjps
- TLSH T1BD433AA874709857FDE8F03931E2CA966326C20AB622CB47E1649CFDFCCD3154E6661D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.