General
- Target 2026-09-04_c8b9848beacb0f59022947e93dcc2cd2_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 20.9MB
- Sample260904-1na2va1dpg
- SHA256 8fb150f4af71170c9799dd006262ce08cf7b04693149f0219050cd9c10d807a2
- MD5 c8b9848beacb0f59022947e93dcc2cd2
- SHA1 c5e678222ebf29360a45e866a5011589928207ed
- SHA512 3785fad20d5db2aba53a10a938cf8bebc6874479e4189b7d14d4d1e92c708ec14dcbe2de27b957f739dd509af50c7fdbbd09ecd85f525fa9aca99827628e3b38
- SSDEEP 393216:p1biodjs14bMgLc9zGdsWJXU/1aUdq1B7hgzcHsnOTq2nggodjPp9piLI:S2G4TLcNOsCg1aUg18egO22ggodB9pX
- TLSH T1FA27338101E266D7FCC7E13A96528161D273B5206E20948F2B9C43993DBB3F68D3F7A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-09-04_c8b9848beacb0f59022947e93dcc2cd2_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_c8b9848beacb0f59022947e93dcc2cd2_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_c8b9848beacb0f59022947e93dcc2cd2_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 20.9MB
- SHA256 8fb150f4af71170c9799dd006262ce08cf7b04693149f0219050cd9c10d807a2
- MD5 c8b9848beacb0f59022947e93dcc2cd2
- SHA1 c5e678222ebf29360a45e866a5011589928207ed
- SHA512 3785fad20d5db2aba53a10a938cf8bebc6874479e4189b7d14d4d1e92c708ec14dcbe2de27b957f739dd509af50c7fdbbd09ecd85f525fa9aca99827628e3b38
- SSDEEP 393216:p1biodjs14bMgLc9zGdsWJXU/1aUdq1B7hgzcHsnOTq2nggodjPp9piLI:S2G4TLcNOsCg1aUg18egO22ggodB9pX
- TLSH T1FA27338101E266D7FCC7E13A96528161D273B5206E20948F2B9C43993DBB3F68D3F7A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Loads dropped DLL
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.