General
- Target 2026-07-07_ca0c004b44bfdd05f87dc13020c945ee_glassworm_icedid_luca-stealer_njrat_remcos_stealc
- Size 35.5MB
- Sample260707-lyklpsct2m
- SHA256 971b5dbf92197db681f9dc08fad88036d6da76cc4fcebd48cd4156aa4dece5c3
- MD5 ca0c004b44bfdd05f87dc13020c945ee
- SHA1 4925a20c8424ed89d6368c3e9bb355d548628159
- SHA512 452516d5ccbde2a381e1b047edf3b3ee1f75834e2d873dde91a3047f2ca98f81f272ab7ec06a75f88e7e839d3ddcd1d450a1bf39590080609832a2f8b4545e45
- SSDEEP 786432:1byJe5hN+2TtPVXQQ/cHUTRsqkKjBMkzCVoKZ:1OKK2TFNQNbxOBM2CV3Z
- TLSH T18D8701B276F1299BDA6EC0F5C111F13F9B12B86D07197687656637BCA323D90EC28B01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_ca0c004b44bfdd05f87dc13020c945ee_glassworm_icedid_luca-stealer_njrat_remcos_stealc.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_ca0c004b44bfdd05f87dc13020c945ee_glassworm_icedid_luca-stealer_njrat_remcos_stealc.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_ca0c004b44bfdd05f87dc13020c945ee_glassworm_icedid_luca-stealer_njrat_remcos_stealc
- Size 35.5MB
- SHA256 971b5dbf92197db681f9dc08fad88036d6da76cc4fcebd48cd4156aa4dece5c3
- MD5 ca0c004b44bfdd05f87dc13020c945ee
- SHA1 4925a20c8424ed89d6368c3e9bb355d548628159
- SHA512 452516d5ccbde2a381e1b047edf3b3ee1f75834e2d873dde91a3047f2ca98f81f272ab7ec06a75f88e7e839d3ddcd1d450a1bf39590080609832a2f8b4545e45
- SSDEEP 786432:1byJe5hN+2TtPVXQQ/cHUTRsqkKjBMkzCVoKZ:1OKK2TFNQNbxOBM2CV3Z
- TLSH T18D8701B276F1299BDA6EC0F5C111F13F9B12B86D07197687656637BCA323D90EC28B01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.