2026-07-08_72dda171c1ee320f87e949bc0b318fe0_glassworm_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-08_72dda171c1ee320f87e949bc0b318fe0_glassworm_icedid_luca-stealer_njrat_stealc
Size 4.5MB
Sample260708-c2eeeshx4x
SHA256 c56f4181506cf20e922d096a61951aea9c5142b1ff7feed2af7e8e9bb9c6bd04
MD5 72dda171c1ee320f87e949bc0b318fe0
SHA1 4728297ed35208a75c9d20312404481b0f23823d
SHA512 f519399cd081ffc532d942ed29381854fac9c93f376db89355efc4eb33a52b5a0f4798d290bcf6b87f3ed5c39ff893261e7f66023542c2ee94d957c6479fe6b7
SSDEEP 49152:cugW0Z7LnpbUVvtilJiWM2J/v3MQk9LDDXzVP/U3HPvaTwwebAinyhnpyPrmtaMw:5LvtKhXWhP/MAYkRWaP2sc
TLSH
T17426AE4AB2A60CDAD263C53C99167B13DB79742A173443FB16EC1422DF6B9C04EBE742
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-08_72dda171c1ee320f87e949bc0b318fe0_glassworm_icedid_luca-stealer_njrat_stealc

File Explorer

2026-07-08_72dda171c1ee320f87e949bc0b318fe0_glassworm_icedid_luca-stealer_njrat_stealc

.exe 4.5MB

2026-07-08_72dda171c1ee320f87e949bc0b318fe0_glassworm_icedid_luca-stealer_njrat_stealc

IMPHASH dd84cbdccd405343c0ec273821fb7785
SHA256 c56f4181506cf20e922d096a61951aea9c5142b1ff7feed2af7e8e9bb9c6bd04
MD5 72dda171c1ee320f87e949bc0b318fe0
SHA1 4728297ed35208a75c9d20312404481b0f23823d
SHA512 f519399cd081ffc532d942ed29381854fac9c93f376db89355efc4eb33a52b5a0f4798d290bcf6b87f3ed5c39ff893261e7f66023542c2ee94d957c6479fe6b7
SSDEEP 49152:cugW0Z7LnpbUVvtilJiWM2J/v3MQk9LDDXzVP/U3HPvaTwwebAinyhnpyPrmtaMw:5LvtKhXWhP/MAYkRWaP2sc
TLSH
T17426AE4AB2A60CDAD263C53C99167B13DB79742A173443FB16EC1422DF6B9C04EBE742
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2176220

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\jy\Downloads\affin latest\affin (5)\affin\examples\build\optic.pdb

d3d11

D3D11CreateDevice

d3dcompiler_47

D3DCompile

kernel32

InitializeCriticalSectionAndSpinCount LeaveCriticalSection CreateFileW CreateToolhelp32Snapshot GetTempPathA Process32NextW CreateFileA Process32FirstW CloseHandle GetLocalTime DeleteCriticalSection FlushFileBuffers CreateDirectoryW ReadFile GetVolumeInformationW FindFirstFileW GetFileSizeEx VirtualProtect VirtualFree SetConsoleTitleA FindNextFileW GetStdHandle WriteConsoleA SetConsoleMode GetConsoleCursorInfo DeviceIoControl VirtualAlloc TerminateProcess RemoveDirectoryW SetFileTime GetModuleFileNameW VirtualUnlock SetFilePointer GetTempPathW GetLargePageMinimum FindClose CreateMutexA GetFileAttributesW GetCurrentThreadId ReadConsoleA OpenProcess GetCommandLineA GetConsoleMode GetLastError SetConsoleCursorInfo ReleaseSRWLockExclusive AcquireSRWLockExclusive DeleteFileW ReleaseSRWLockShared FreeConsole CreateThread Module32FirstW SetStdHandle AddVectoredExceptionHandler GetThreadContext VirtualLock MoveFileExW AcquireSRWLockShared GetCurrentProcessId SystemTimeToFileTime GetModuleHandleW GetConsoleWindow Module32NextW SetConsoleOutputCP GetSystemTimeAsFileTime SetProcessWorkingSetSize GetTickCount AllocConsole MoveFileW IsWow64Process VirtualQueryEx SetUnhandledExceptionFilter GetExitCodeProcess GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP WriteFile HeapReAlloc OutputDebugStringW GetConsoleOutputCP ReadConsoleW SetFilePointerEx GlobalLock GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW FlsFree FlsSetValue FlsGetValue FlsAlloc HeapFree HeapAlloc GetCommandLineW WriteConsoleW GetFileType GetModuleHandleExW FreeLibraryAndExitThread ExitThread LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc RtlUnwind SetLastError RaiseException RtlPcToFileHeader RtlUnwindEx GetCPInfo GetStringTypeW EnterCriticalSection QueryPerformanceCounter FreeLibrary GlobalFree GlobalAlloc MultiByteToWideChar ExitProcess GetCurrentThread GetTickCount64 Sleep SetThreadPriority GetCurrentProcess SetPriorityClass GetProcAddress QueryPerformanceFrequency SetEndOfFile LCMapStringEx DecodePointer EncodePointer InitializeCriticalSectionEx InitOnceBeginInitialize InitOnceComplete GetFileInformationByHandleEx LoadLibraryA GetLocaleInfoA GetModuleHandleA GlobalUnlock IsValidCodePage AreFileApisANSI SetFileInformationByHandle GetFileAttributesExW FindFirstFileExW GetLocaleInfoEx FormatMessageA LocalFree TryAcquireSRWLockExclusive GetExitCodeThread SwitchToThread WaitForSingleObjectEx InitializeSListHead GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent UnhandledExceptionFilter SleepConditionVariableSRW WakeAllConditionVariable WideCharToMultiByte HeapSize EnumSystemLocalesW

user32

LoadCursorW GetForegroundWindow GetKeyboardLayout TrackMouseEvent ClientToScreen GetCapture EmptyClipboard CloseClipboard OpenClipboard GetCursorPos ScreenToClient GetMessageExtraInfo GetKeyState GetAsyncKeyState IsIconic UpdateWindow SetWindowLongPtrA GetWindowLongPtrA ToUnicode TranslateMessage SetClipboardData SetLayeredWindowAttributes SetWindowDisplayAffinity PeekMessageW ExitWindowsEx SetCursorPos ReleaseCapture IsWindowUnicode DispatchMessageW ShowWindow GetKeyboardState RegisterClassExW GetWindowLongPtrW GetSystemMetrics CreateWindowExW PostMessageA SetWindowLongPtrW SetWindowPos IsWindowVisible SetCapture SetProcessDpiAwarenessContext GetClientRect SetCursor GetClipboardData IsWindow FindWindowW SetFocus MapVirtualKeyW DefWindowProcW

advapi32

RegSetValueExW RegQueryValueExW LookupPrivilegeValueW AdjustTokenPrivileges RegCloseKey RegCreateKeyExW RegDeleteTreeW GetTokenInformation OpenProcessToken RegOpenKeyExW RegCreateKeyW RegDeleteValueW

shell32

ShellExecuteW ShellExecuteExW ShellExecuteA SHGetKnownFolderPath

ole32

CoTaskMemFree

winhttp

WinHttpQueryOption WinHttpQueryDataAvailable WinHttpConnect WinHttpSetTimeouts WinHttpSendRequest WinHttpGetIEProxyConfigForCurrentUser WinHttpCloseHandle WinHttpOpenRequest WinHttpReadData WinHttpQueryHeaders WinHttpAddRequestHeaders WinHttpOpen WinHttpReceiveResponse

imm32

ImmSetCandidateWindow ImmSetCompositionWindow ImmReleaseContext ImmGetContext

bcrypt

BCryptFinishHash BCryptSetProperty BCryptHashData BCryptCreateHash BCryptHash BCryptCloseAlgorithmProvider BCryptOpenAlgorithmProvider BCryptDecrypt BCryptGenerateSymmetricKey BCryptDestroyKey BCryptEncrypt BCryptDestroyHash BCryptGenRandom

winmm

timeBeginPeriod timeEndPeriod

dcomp

DCompositionCreateDevice

ntdll

NtUnloadDriver NtQuerySystemInformation RtlLookupFunctionEntry RtlInitUnicodeString RtlAdjustPrivilege NtLoadDriver RtlCaptureContext RtlVirtualUnwind

crypt32

CertFreeCertificateContext CertNameToStrA

ws2_32

freeaddrinfo WSACleanup ntohl WSAStartup getaddrinfo

Name

.text

Size

2.4MB

Virtual Size

2.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

992KB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

75KB

Virtual Size

75KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

488B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-08_72dda171c1ee320f87e949bc0b318fe0_glassworm_icedid_luca-stealer_njrat_stealc

d3d11

d3dcompiler_47

kernel32

user32

advapi32

shell32

ole32

winhttp

imm32

bcrypt

winmm

dcomp

ntdll

crypt32

ws2_32

generic