2026-07-07_bfe2c74394aa2cfd5677e3cc6eda76c9_glassworm_icedid_luca-stealer_njrat_poet-rat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-07_bfe2c74394aa2cfd5677e3cc6eda76c9_glassworm_icedid_luca-stealer_njrat_poet-rat_stealc
Size 3.9MB
Sample260708-a7tp7agy3z
SHA256 b55d22c23e6d74120ad1df306b2012b0bd5cfccd0c71f58e4a71538fa41f93b5
MD5 bfe2c74394aa2cfd5677e3cc6eda76c9
SHA1 317d7aa99242fe4d90703b2c56b16aff82d86392
SHA512 f6afa51a1943515d526dc857b77619974adc3ddbc2de51a6f8b4667f91b0d6df8f389f55566022eac92dddd24e7e43fad7bb0348a58408749180bd3686212f82
SSDEEP 49152:J618HANVYU4rctjqS6Dq8M/fT2DBoMWhy51oX+UP8Y80i/+K6bxW:xgnyqd/fT2cOoXhEYu/+K6b
TLSH
T12B16AE4A329002F4C4AFC0BDCA5A8513F77574542360AADB12E886792FA3EF55B3F716
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-07_bfe2c74394aa2cfd5677e3cc6eda76c9_glassworm_icedid_luca-stealer_njrat_poet-rat_stealc

File Explorer

2026-07-07_bfe2c74394aa2cfd5677e3cc6eda76c9_glassworm_icedid_luca-stealer_njrat_poet-rat_stealc

.exe 3.9MB

2026-07-07_bfe2c74394aa2cfd5677e3cc6eda76c9_glassworm_icedid_luca-stealer_njrat_poet-rat_stealc

IMPHASH d15efbf9727f76330bbea659608f20d7
SHA256 b55d22c23e6d74120ad1df306b2012b0bd5cfccd0c71f58e4a71538fa41f93b5
MD5 bfe2c74394aa2cfd5677e3cc6eda76c9
SHA1 317d7aa99242fe4d90703b2c56b16aff82d86392
SHA512 f6afa51a1943515d526dc857b77619974adc3ddbc2de51a6f8b4667f91b0d6df8f389f55566022eac92dddd24e7e43fad7bb0348a58408749180bd3686212f82
SSDEEP 49152:J618HANVYU4rctjqS6Dq8M/fT2DBoMWhy51oX+UP8Y80i/+K6bxW:xgnyqd/fT2cOoXhEYu/+K6b
TLSH
T12B16AE4A329002F4C4AFC0BDCA5A8513F77574542360AADB12E886792FA3EF55B3F716
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1707744

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

RegOpenKeyExA RegGetValueW CryptAcquireContextW CryptReleaseContext CryptGenRandom RegCloseKey

ntdll

RtlPcToFileHeader RtlUnwindEx RtlVirtualUnwind RtlUnwind RtlGetLastNtStatus RtlCaptureContext RtlLookupFunctionEntry

kernel32

HeapSize SetEnvironmentVariableW GetFileType GetLastError WriteConsoleW GetStdHandle GetEnvironmentVariableW SetCurrentDirectoryW GetCurrentDirectoryW CreateDirectoryW CreateFileW FindClose FindFirstFileExW FindNextFileW FlushFileBuffers GetDriveTypeW GetFileAttributesW GetFileInformationByHandle GetFinalPathNameByHandleW GetVolumePathNameW ReadFile SetFileInformationByHandle SetFileTime CloseHandle DuplicateHandle SetLastError GetCurrentProcess GetSystemInfo GetSystemTime VirtualQuery CreateFileMappingW MapViewOfFile UnmapViewOfFile GetModuleFileNameW MoveFileExW SystemTimeToFileTime MultiByteToWideChar WideCharToMultiByte ExpandEnvironmentStringsW SetUnhandledExceptionFilter SetErrorMode InitializeCriticalSection EnterCriticalSection LeaveCriticalSection GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetProcAddress LoadLibraryExA SetConsoleCtrlHandler GetCommandLineW FindFirstFileW GetLongPathNameW GetProcessTimes TerminateProcess GetSystemTimeAsFileTime GetNativeSystemInfo GetModuleHandleW GetConsoleMode GetConsoleScreenBufferInfo SetConsoleTextAttribute SearchPathW WaitForSingleObject GetExitCodeProcess ResumeThread CreateProcessW CreateJobObjectW AssignProcessToJobObject SetInformationJobObject LocalFree SetProcessAffinityMask FormatMessageA K32GetProcessMemoryInfo RaiseException VirtualProtect FreeLibrary FreeEnvironmentStringsW HeapQueryInformation GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage GetLocaleInfoEx QueryPerformanceCounter ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive InitOnceBeginInitialize InitOnceComplete InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetStringTypeW CompareStringEx GetCPInfo WakeAllConditionVariable SleepConditionVariableSRW UnhandledExceptionFilter IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW InitializeSListHead InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW ExitProcess GetModuleHandleExW SetStdHandle SetFilePointerEx SetEndOfFile HeapValidate HeapWalk WriteFile GetCommandLineA ReadConsoleW GetConsoleOutputCP HeapFree HeapAlloc FlsAlloc FlsGetValue FlsSetValue FlsFree GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileSizeEx HeapReAlloc GetProcessHeap GetTimeZoneInformation

Name

.text

Size

2.0MB

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

254KB

Virtual Size

271KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

86KB

Virtual Size

85KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

580KB

Virtual Size

584KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-07_bfe2c74394aa2cfd5677e3cc6eda76c9_glassworm_icedid_luca-stealer_njrat_poet-rat_stealc

advapi32

ntdll

kernel32

generic