General
- Target 2026-07-05_6346076d136ab16aeed1a274da86c2ed_glassworm_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 43.0MB
- Sample260705-3d4yaags7z
- SHA256 64c43ad09af101c0e3d631bf2ad72e097e423a1bfcd4d681809cab15c0bba001
- MD5 6346076d136ab16aeed1a274da86c2ed
- SHA1 4df1ec2349227775e3973839c42fa9f407004d5b
- SHA512 bb3b624565daf3665a6e8e1cc92cb1773c3445ef194eb7ad2f713c9804b1fb383335fda281d226ffaf47f0b4d122747cfc355f4b47c8b8071fbcf40157214e55
- SSDEEP 393216:MsEnloAS99al3js8q6OIlFcQmy+HeRLoJ3HYGiI6EMhCRxJrG7DTE+aTBImjg9+:B6Q4Ey+8oKGiWeDTE+aimjO
- TLSH T1DDA74A02A2AC7CE3C5368230D7BB8BF2D679BC555224829F11D1FB473D366527E2A364
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_6346076d136ab16aeed1a274da86c2ed_glassworm_icedid_luca-stealer_njrat_remcos_stealc_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_6346076d136ab16aeed1a274da86c2ed_glassworm_icedid_luca-stealer_njrat_remcos_stealc_vidar.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_6346076d136ab16aeed1a274da86c2ed_glassworm_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 43.0MB
- SHA256 64c43ad09af101c0e3d631bf2ad72e097e423a1bfcd4d681809cab15c0bba001
- MD5 6346076d136ab16aeed1a274da86c2ed
- SHA1 4df1ec2349227775e3973839c42fa9f407004d5b
- SHA512 bb3b624565daf3665a6e8e1cc92cb1773c3445ef194eb7ad2f713c9804b1fb383335fda281d226ffaf47f0b4d122747cfc355f4b47c8b8071fbcf40157214e55
- SSDEEP 393216:MsEnloAS99al3js8q6OIlFcQmy+HeRLoJ3HYGiI6EMhCRxJrG7DTE+aTBImjg9+:B6Q4Ey+8oKGiWeDTE+aimjO
- TLSH T1DDA74A02A2AC7CE3C5368230D7BB8BF2D679BC555224829F11D1FB473D366527E2A364
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.