General
- Target 2026-09-06_64acbe1e78159348800a00517610b298_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 10.6MB
- Sample260907-ch3mxawhmb
- SHA256 ae027f260205f9d16901722e6747ad446a6ed7df0fd33b1cab5b125494bc0aea
- MD5 64acbe1e78159348800a00517610b298
- SHA1 98527f8ab62a2dbe85f8d321e7dc08e6aebfa008
- SHA512 7ee640b480fae0c016e5da97c4ea35191bdaa910810fb0993890445ebbef21e62b5b7746cf039857e4463d215b1068171baae4850563610c687683ff12a13c43
- SSDEEP 196608:8G2eb0W8UA4cturHm/uhHToAUPNfGU5vXvLu2TuG9XLE/dIgZ+h:83W8ltuCmhHTodRGkXT9v9XcJA
- TLSH T1BEB6339973C908F8F95AB23D45C2065263B674210774C69B0BF84DA22E771E8FF71B62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-09-06_64acbe1e78159348800a00517610b298_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-06_64acbe1e78159348800a00517610b298_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-06_64acbe1e78159348800a00517610b298_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 10.6MB
- SHA256 ae027f260205f9d16901722e6747ad446a6ed7df0fd33b1cab5b125494bc0aea
- MD5 64acbe1e78159348800a00517610b298
- SHA1 98527f8ab62a2dbe85f8d321e7dc08e6aebfa008
- SHA512 7ee640b480fae0c016e5da97c4ea35191bdaa910810fb0993890445ebbef21e62b5b7746cf039857e4463d215b1068171baae4850563610c687683ff12a13c43
- SSDEEP 196608:8G2eb0W8UA4cturHm/uhHToAUPNfGU5vXvLu2TuG9XLE/dIgZ+h:83W8ltuCmhHTodRGkXT9v9XcJA
- TLSH T1BEB6339973C908F8F95AB23D45C2065263B674210774C69B0BF84DA22E771E8FF71B62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.