General
- Target 2026-08-22_25d3b396c0c3a6e34e3187fbcf89babf_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 34.9MB
- Sample260822-jr58qaee82
- SHA256 91a7b22497f9d06c1fba59075d7a240a87263d77379dea522fda0fb0232224f1
- MD5 25d3b396c0c3a6e34e3187fbcf89babf
- SHA1 84e595914697c05bcb29819785e50944faa8e682
- SHA512 b69d83bff5e822f16cd01bed6a375f6b45e36eead852ca53b2601092b45879e1669b0c5057c283d5bdda0893f6142015fad6ca60e6b16e9d4d024a673e837a88
- SSDEEP 786432:6rv2G4TLcNOo58KPR1BKvuToWAGW8Ug1TPz2egzSm0ZW/p:PTIAUdZ1E0oZ6TPngzr0Z6p
- TLSH T1D987335A09D20D62FACBD1328A724662D2F371A43F71995F078842E93EB72D44D7B3B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Behavioral task
behavioral1
Sample
RCE.vbs
Resource
win10v2004-20260513-en
15 signatures
900 seconds
Behavioral task
behavioral2
Sample
RCE.vbs
Resource
win11ltsc2024-20260709-en
1 signatures
900 seconds
Malware Config
Targets
-
- Target RCE.pyc
- Size 50KB
- SHA256 0b0da22563d7a1d00cef2e4c8c202dc8c200faa8ca169b45c71060f7da246dd4
- MD5 a97e43017cd17929a5c8f2a4d5d79735
- SHA1 6a366c6eed8b1429fd1c119f0c86eacfc75f649e
- SHA512 0b78387a1b0fd4c09325c7d7feed2207848b90bff86fea3ecd69b714e1142e8df21f1dcdb4e169193d8074a04ca6de0153dd001339e5d40ebeb6b18b110a4738
- SSDEEP 768:y8j26+JYEQCB3snzmaIUP4V3OXhZA5JW44uJPLq8NbA7Z:FV+JYlCmz9gV3OXhef5L9SV
- TLSH T14E3319B8A964E567EDE9F13831E359997332C1867255DA03E4644CF9BCCC3069AA033D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Executes a VBScript file via the Windows Script Host.