2026-06-28_58d483230c8d10e355c00fc64853bba0_glassworm_icedid_krakenkeylogger_luca-stealer_njrat_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-06-28_58d483230c8d10e355c00fc64853bba0_glassworm_icedid_krakenkeylogger_luca-stealer_njrat_vidar
Size 75.9MB
Sample260628-2d1eesfv4y
SHA256 7db9d5eed01aa158a9a23471bac44a8675bc9aacc24d187caa3dbe82c2dd730e
MD5 58d483230c8d10e355c00fc64853bba0
SHA1 376eb4c515f1eb0269166d6bffb35690faf5a221
SHA512 0ed11c2fcc90fcae1ba692d097e3fa65b248bfbefdef724ffa050f8172513f3b63435f3206e01d28f12c9e8efacca320b9e1220b8a38e5da5e4c1fcbd53e5c2b
SSDEEP 786432:09sEI8JuatupzsQYH/BEEpydlKdh8TKNpRmJXlV+lLZ:KsWJuatK4/XMsmJXlV+lLZ
TLSH
T17708BF15F3E80B56E63FC27CC6638512E6B1B8421362D6CF0454DA992F63BC1AB77362
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Signatures

Detects encrypted or obfuscated .NET executables 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_DotNET_Encrypted

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-28_58d483230c8d10e355c00fc64853bba0_glassworm_icedid_krakenkeylogger_luca-stealer_njrat_vidar

File Explorer

2026-06-28_58d483230c8d10e355c00fc64853bba0_glassworm_icedid_krakenkeylogger_luca-stealer_njrat_vidar

.exe 75.9MB

2026-06-28_58d483230c8d10e355c00fc64853bba0_glassworm_icedid_krakenkeylogger_luca-stealer_njrat_vidar

SHA256 7db9d5eed01aa158a9a23471bac44a8675bc9aacc24d187caa3dbe82c2dd730e
MD5 58d483230c8d10e355c00fc64853bba0
SHA1 376eb4c515f1eb0269166d6bffb35690faf5a221
SHA512 0ed11c2fcc90fcae1ba692d097e3fa65b248bfbefdef724ffa050f8172513f3b63435f3206e01d28f12c9e8efacca320b9e1220b8a38e5da5e4c1fcbd53e5c2b
SSDEEP 786432:09sEI8JuatupzsQYH/BEEpydlKdh8TKNpRmJXlV+lLZ:KsWJuatK4/XMsmJXlV+lLZ
TLSH
T17708BF15F3E80B56E63FC27CC6638512E6B1B8421362D6CF0454DA992F63BC1AB77362
MD5 SHA1 SHA512 SSDEEP TLSH

Detects encrypted or obfuscated .NET executables
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6205216

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

6.3MB

Virtual Size

6.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.CLR_UEF

Size

512B

Virtual Size

215B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

24KB

Virtual Size

104KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

226KB

Virtual Size

225KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Section

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

3.0MB

Virtual Size

3.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

31KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-28_58d483230c8d10e355c00fc64853bba0_glassworm_icedid_krakenkeylogger_luca-stealer_njrat_vidar

generic