General
- Target 2026-10-02_027f0046bb0a6b227631ec75cbd01176_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.8MB
- Sample261003-ws6xvswtbx
- SHA256 1e7cd5bdcda0f152dde5bc18428e093a749d49a4fb8ac0d63024da853cf28146
- MD5 027f0046bb0a6b227631ec75cbd01176
- SHA1 dfcccef053a4172aefd814cf6348695250e34a1c
- SHA512 ba9730ac426a9bda143313010d240ccfdd4b345e7b94196a259090c175a4754509e6a7c94006784c54d72febec25a1c9ffe30fad2f286dba6eb9345e1a155438
- SSDEEP 196608:V4hsqlGN65ZJtbW897Gftr1LDsBTG9Wd1ndz4k1tCm75Ivsk05xp6H6CVkXMUnaZ:lqrJ1q3sB1rnpDt1FIvskYmHByA
- TLSH T143E63314BB9400EEFED7513FA521D0D262A3757A1BA0CAEB17E402AA3F176F51D3E244
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-02_027f0046bb0a6b227631ec75cbd01176_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-02_027f0046bb0a6b227631ec75cbd01176_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.8MB
- SHA256 1e7cd5bdcda0f152dde5bc18428e093a749d49a4fb8ac0d63024da853cf28146
- MD5 027f0046bb0a6b227631ec75cbd01176
- SHA1 dfcccef053a4172aefd814cf6348695250e34a1c
- SHA512 ba9730ac426a9bda143313010d240ccfdd4b345e7b94196a259090c175a4754509e6a7c94006784c54d72febec25a1c9ffe30fad2f286dba6eb9345e1a155438
- SSDEEP 196608:V4hsqlGN65ZJtbW897Gftr1LDsBTG9Wd1ndz4k1tCm75Ivsk05xp6H6CVkXMUnaZ:lqrJ1q3sB1rnpDt1FIvskYmHByA
- TLSH T143E63314BB9400EEFED7513FA521D0D262A3757A1BA0CAEB17E402AA3F176F51D3E244
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.