General
- Target 2026-08-25_684b7213c57f6c1c518e62b2b20438ce_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 78.0MB
- Sample260826-2pvcjsbr3s
- SHA256 e1a2b2fb6c4e587ce4b31604a0f6a580b5965ebabfc16c77c81ae0053a86d97e
- MD5 684b7213c57f6c1c518e62b2b20438ce
- SHA1 96408588bd66595c7e0b75f61a84d36ed4950236
- SHA512 dc99a04667d78cda97258c4ca5ecdc8d080e46d92bbdec8ecdd2f8f05e783082115631bf3e9b27e8dd014ea30b9b4bd6b0ac7b13ceb13f4751fbe050870304bb
- SSDEEP 1572864:IqrTIAm/r8rE+vWlM9ojCrD4WWJvKSc/JUNnTr0oZ/hvevc3og+NodvXT:xkwrzelKbDSc/iFnDhvevc3B
- TLSH T1BD0833819E416D8EF44D813B86E04E16F567BC6E1D925A4F27F809352EB73C8C93EA31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-25_684b7213c57f6c1c518e62b2b20438ce_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_684b7213c57f6c1c518e62b2b20438ce_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_684b7213c57f6c1c518e62b2b20438ce_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 78.0MB
- SHA256 e1a2b2fb6c4e587ce4b31604a0f6a580b5965ebabfc16c77c81ae0053a86d97e
- MD5 684b7213c57f6c1c518e62b2b20438ce
- SHA1 96408588bd66595c7e0b75f61a84d36ed4950236
- SHA512 dc99a04667d78cda97258c4ca5ecdc8d080e46d92bbdec8ecdd2f8f05e783082115631bf3e9b27e8dd014ea30b9b4bd6b0ac7b13ceb13f4751fbe050870304bb
- SSDEEP 1572864:IqrTIAm/r8rE+vWlM9ojCrD4WWJvKSc/JUNnTr0oZ/hvevc3og+NodvXT:xkwrzelKbDSc/iFnDhvevc3B
- TLSH T1BD0833819E416D8EF44D813B86E04E16F567BC6E1D925A4F27F809352EB73C8C93EA31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.