General
- Target 2026-07-01_a681186b4fd8feb54504e898dcead17d_glassworm_icedid_luca-stealer_njrat_stealc
- Size 4.0MB
- Sample260701-seysjsaw5w
- SHA256 a4124abed0e3a83620041bc5ec28daa802adb4c2752e23843131167e378cab55
- MD5 a681186b4fd8feb54504e898dcead17d
- SHA1 11ef6f2cdf0493de872495c383ccad6b194267c0
- SHA512 c0c0b048c7048c5a4f09c0ef1318427b5000eff48c790f8e7d8de0338eeb97400336dbe57c9c79542994713e0ea3d31c3a252e7e5189a8388f3125e09e8f7c76
- SSDEEP 98304:9ZnuomZBBBBBBBBBBBBBBBBBBBBBBBBBBBBU2lKf5SSDntdDpbRZy:9ZnuomZBBBBBBBBBBBBBBBBBBBBBBBB/
- TLSH T1F9169C97B2B500D8C166C1399742E577E7727C150BA48BCF12E16E6B3F279E20DBA720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_a681186b4fd8feb54504e898dcead17d_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_a681186b4fd8feb54504e898dcead17d_glassworm_icedid_luca-stealer_njrat_stealc
- Size 4.0MB
- SHA256 a4124abed0e3a83620041bc5ec28daa802adb4c2752e23843131167e378cab55
- MD5 a681186b4fd8feb54504e898dcead17d
- SHA1 11ef6f2cdf0493de872495c383ccad6b194267c0
- SHA512 c0c0b048c7048c5a4f09c0ef1318427b5000eff48c790f8e7d8de0338eeb97400336dbe57c9c79542994713e0ea3d31c3a252e7e5189a8388f3125e09e8f7c76
- SSDEEP 98304:9ZnuomZBBBBBBBBBBBBBBBBBBBBBBBBBBBBU2lKf5SSDntdDpbRZy:9ZnuomZBBBBBBBBBBBBBBBBBBBBBBBB/
- TLSH T1F9169C97B2B500D8C166C1399742E577E7727C150BA48BCF12E16E6B3F279E20DBA720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1