General
- Target 2026-08-24_5c9683d4ef18f85fa785721593e91ef8_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 15.1MB
- Sample260825-prj85ssdjc
- SHA256 7ac38a2f3b30182a276f869823ff950e1001e292f6ab50324546b82642e8397b
- MD5 5c9683d4ef18f85fa785721593e91ef8
- SHA1 cb8ca7004b4817814d45a0ccd9bdea4d594f7dd9
- SHA512 19dda887d7134b641af926565a814394d3b2a8b08d02654b295915f60a49f06f244c19e76d077f5c110218bc09988e9aa956ebd5d582530beadf93b35d21230f
- SSDEEP 393216:3RkMdhi5PxfB1yUdq1B7ncHsn4qS/w01iR24:hrhiJxZ1yUg1UgzSI01C
- TLSH T1F6F6339542C109B3FCC3F13E5A6582B2E371F1606722D98F1B6497A62D6B1F50E3B7A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-24_5c9683d4ef18f85fa785721593e91ef8_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_5c9683d4ef18f85fa785721593e91ef8_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_5c9683d4ef18f85fa785721593e91ef8_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 15.1MB
- SHA256 7ac38a2f3b30182a276f869823ff950e1001e292f6ab50324546b82642e8397b
- MD5 5c9683d4ef18f85fa785721593e91ef8
- SHA1 cb8ca7004b4817814d45a0ccd9bdea4d594f7dd9
- SHA512 19dda887d7134b641af926565a814394d3b2a8b08d02654b295915f60a49f06f244c19e76d077f5c110218bc09988e9aa956ebd5d582530beadf93b35d21230f
- SSDEEP 393216:3RkMdhi5PxfB1yUdq1B7ncHsn4qS/w01iR24:hrhiJxZ1yUg1UgzSI01C
- TLSH T1F6F6339542C109B3FCC3F13E5A6582B2E371F1606722D98F1B6497A62D6B1F50E3B7A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.