General
- Target 2026-08-25_e7454d582bf829b2bba8fe7dbf1625fe_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 28.0MB
- Sample260826-e5yzcabf57
- SHA256 742775c5a4534f726383b0493196c22c0df5bed08f6b9b1ce826994ef605668f
- MD5 e7454d582bf829b2bba8fe7dbf1625fe
- SHA1 e60370429842451da599d752b8c137ec56ef3aeb
- SHA512 0d9079b1af349ab10db15f0b932e5ccb2c9f19fd869262972ac248d0de23e604c1a759f39237f6e5db56556d81306e018e6f58a0b539968cd9a0a43d91520e67
- SSDEEP 786432:6W8f/Q+gHoS85Z0YfruCrUv872zbWlA68RCMw1RgtAitVPQPL0hs:6WWJVwKuCrUvO2zbWm6ihw1KtljQPLcs
- TLSH T1D357338E63C10C90F0D9C63D56D1A96692B631336B700ACB47F2A97B46635E4EEF1F09
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-25_e7454d582bf829b2bba8fe7dbf1625fe_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_e7454d582bf829b2bba8fe7dbf1625fe_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_e7454d582bf829b2bba8fe7dbf1625fe_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 28.0MB
- SHA256 742775c5a4534f726383b0493196c22c0df5bed08f6b9b1ce826994ef605668f
- MD5 e7454d582bf829b2bba8fe7dbf1625fe
- SHA1 e60370429842451da599d752b8c137ec56ef3aeb
- SHA512 0d9079b1af349ab10db15f0b932e5ccb2c9f19fd869262972ac248d0de23e604c1a759f39237f6e5db56556d81306e018e6f58a0b539968cd9a0a43d91520e67
- SSDEEP 786432:6W8f/Q+gHoS85Z0YfruCrUv872zbWlA68RCMw1RgtAitVPQPL0hs:6WWJVwKuCrUvO2zbWm6ihw1KtljQPLcs
- TLSH T1D357338E63C10C90F0D9C63D56D1A96692B631336B700ACB47F2A97B46635E4EEF1F09
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.