General
- Target 2026-09-08_c8d4f3a0bf0e8424c1f2276b3d95cf82_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 68.1MB
- Sample260910-c93rzsdm7w
- SHA256 154b66b9f763871cbe4084a135170cb52b0b25dea35cff44b62c5749a50c69f4
- MD5 c8d4f3a0bf0e8424c1f2276b3d95cf82
- SHA1 58a59ab68d9b2926f3e1430fa5cdbfb56598ea42
- SHA512 ec00c8456ddcebd0ab4e6fa10a42fd3b030a8c15177e463115a84a9ee381c13a2184fced5aa06eb1af93d413e0d7bc1fdd59ac7c53ccebaae09108e5b895f18c
- SSDEEP 1572864:vP8Wf3P3R8fNknAnZ2yOogqTcaNH21A/RiITK4hT4sN+o:8C/h8fNknAnIdA7lx124hM5o
- TLSH T18FF7339E7F426089E55F52376191CE1B7EE1BACC411B84AB5B640C623F132D6EB3E930
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-09-08_c8d4f3a0bf0e8424c1f2276b3d95cf82_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-08_c8d4f3a0bf0e8424c1f2276b3d95cf82_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_c8d4f3a0bf0e8424c1f2276b3d95cf82_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 68.1MB
- SHA256 154b66b9f763871cbe4084a135170cb52b0b25dea35cff44b62c5749a50c69f4
- MD5 c8d4f3a0bf0e8424c1f2276b3d95cf82
- SHA1 58a59ab68d9b2926f3e1430fa5cdbfb56598ea42
- SHA512 ec00c8456ddcebd0ab4e6fa10a42fd3b030a8c15177e463115a84a9ee381c13a2184fced5aa06eb1af93d413e0d7bc1fdd59ac7c53ccebaae09108e5b895f18c
- SSDEEP 1572864:vP8Wf3P3R8fNknAnZ2yOogqTcaNH21A/RiITK4hT4sN+o:8C/h8fNknAnIdA7lx124hM5o
- TLSH T18FF7339E7F426089E55F52376191CE1B7EE1BACC411B84AB5B640C623F132D6EB3E930
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.