General
- Target 2026-05-06_d3bd3fb98b8f753508c7a48e0a70b858_acrstealer_glassworm_icedid_luca-stealer_njrat
- Size 4.9MB
- Sample260506-v2cvpsft3t
- SHA256 87e23f75df9d76492b8129b502dbde30ca0282685b7ad0d44ab52a0c0d01bcfa
- MD5 d3bd3fb98b8f753508c7a48e0a70b858
- SHA1 efa7750b15b1d02ebe5d789b8d878c265cfc7303
- SHA512 741c541ba53fedf35a220bf4d28da8a370e5ffbcbfc9b07fe37ca4bdec3ea48d8f66bc37845a46e669884f93bfa8aa66b8adc694f05abaa6b7f09d4876698bfc
- SSDEEP 49152:hWUs27y8WpY1oV1iLV8fig18Uy69tDyaVKTP4K2gF3Wf4/PTrS7:h6nYa9hnVPK2gt//S7
- TLSH T100365D6B319CA16DE15BC17B94A7AF40A53373751B33C4E72361835D4E26AC09E3AB23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-05-06_d3bd3fb98b8f753508c7a48e0a70b858_acrstealer_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-06_d3bd3fb98b8f753508c7a48e0a70b858_acrstealer_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-06_d3bd3fb98b8f753508c7a48e0a70b858_acrstealer_glassworm_icedid_luca-stealer_njrat
- Size 4.9MB
- SHA256 87e23f75df9d76492b8129b502dbde30ca0282685b7ad0d44ab52a0c0d01bcfa
- MD5 d3bd3fb98b8f753508c7a48e0a70b858
- SHA1 efa7750b15b1d02ebe5d789b8d878c265cfc7303
- SHA512 741c541ba53fedf35a220bf4d28da8a370e5ffbcbfc9b07fe37ca4bdec3ea48d8f66bc37845a46e669884f93bfa8aa66b8adc694f05abaa6b7f09d4876698bfc
- SSDEEP 49152:hWUs27y8WpY1oV1iLV8fig18Uy69tDyaVKTP4K2gF3Wf4/PTrS7:h6nYa9hnVPK2gt//S7
- TLSH T100365D6B319CA16DE15BC17B94A7AF40A53373751B33C4E72361835D4E26AC09E3AB23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects Reflective DLL injection artifacts
- Custom signature
Detects binaries and memory artifacts referencing sandbox DLLs typically observed in sandbox evasion
Drops startup file