2026-07-14_e5a415dcb9baeb450f7cd4eb1274d4a1_glassworm_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-14_e5a415dcb9baeb450f7cd4eb1274d4a1_glassworm_icedid_luca-stealer_njrat_stealc
Size 5.4MB
Sample260714-dbjf5acy4k
SHA256 4af0dfb9d2fd076037dfbcf88e4afffac6ebda28a1ea0fa3eb86d3b56e938bbf
MD5 e5a415dcb9baeb450f7cd4eb1274d4a1
SHA1 77aeb8f39e32e08504953059cb22bb0472f988d6
SHA512 5b6da75e91c2cfbae1670c64edaacf604790bd13637b02348b77d828d0b52332587f166c321b99a8e5478ecaec341a4264f801da1798d2d89ce562fa57ca6cb2
SSDEEP 49152:i0w3fkrdRokS7gnntcEc0rUGnad7Sz943/ZVxhAOkLm99xjm7OKxE5sD/0utxGrK:Y3GdLjR69Sl8s0/1KFdu9CwJsv6t01P
TLSH
T1DB465A17A3E60198D5FBC039CA579553FBB27C065330BAEB02A4A2565F33AF01A7E315
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-14_e5a415dcb9baeb450f7cd4eb1274d4a1_glassworm_icedid_luca-stealer_njrat_stealc

File Explorer

2026-07-14_e5a415dcb9baeb450f7cd4eb1274d4a1_glassworm_icedid_luca-stealer_njrat_stealc

.exe 5.4MB

2026-07-14_e5a415dcb9baeb450f7cd4eb1274d4a1_glassworm_icedid_luca-stealer_njrat_stealc

IMPHASH 0248c6ca83c2af97c5feaa8ef202a994
SHA256 4af0dfb9d2fd076037dfbcf88e4afffac6ebda28a1ea0fa3eb86d3b56e938bbf
MD5 e5a415dcb9baeb450f7cd4eb1274d4a1
SHA1 77aeb8f39e32e08504953059cb22bb0472f988d6
SHA512 5b6da75e91c2cfbae1670c64edaacf604790bd13637b02348b77d828d0b52332587f166c321b99a8e5478ecaec341a4264f801da1798d2d89ce562fa57ca6cb2
SSDEEP 49152:i0w3fkrdRokS7gnntcEc0rUGnad7Sz943/ZVxhAOkLm99xjm7OKxE5sD/0utxGrK:Y3GdLjR69Sl8s0/1KFdu9CwJsv6t01P
TLSH
T1DB465A17A3E60198D5FBC039CA579553FBB27C065330BAEB02A4A2565F33AF01A7E315
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3550064

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

MultiByteToWideChar CreateFileW LoadLibraryW GetCommandLineW GetTickCount SetLastError VirtualFree VirtualAlloc GetModuleHandleA GetCurrentProcess GetModuleHandleW FreeLibrary GetSystemInfo CloseHandle LeaveCriticalSection EnterCriticalSection CompareStringEx TerminateProcess IsProcessorFeaturePresent VerSetConditionMask VerifyVersionInfoW GetStdHandle GetCurrentProcessId LocalFree AllocConsole FreeConsole AttachConsole GetSystemTime GetLocalTime DuplicateHandle RaiseException SetEvent WaitForSingleObject CreateEventW WaitForMultipleObjects SwitchToThread CreateThread GetCurrentThread GetCurrentThreadId SetThreadPriority GetThreadPriority TerminateThread ResumeThread TlsAlloc TlsGetValue TlsSetValue TlsFree WaitForSingleObjectEx ResetEvent OutputDebugStringW GetConsoleWindow WideCharToMultiByte GetACP SetCurrentDirectoryW GetCurrentDirectoryW CreateDirectoryW DeleteFileW FindClose FindFirstFileW GetFileAttributesW GetFileAttributesExW GetFileInformationByHandle GetFullPathNameW GetLogicalDrives GetLongPathNameW RemoveDirectoryW SetFileTime GetTempPathW GetVolumePathNamesForVolumeNameW SetErrorMode DeviceIoControl CopyFileW MoveFileW MoveFileExW TzSpecificLocalTimeToSystemTime FileTimeToSystemTime SystemTimeToFileTime GetFileInformationByHandleEx FlushFileBuffers GetDriveTypeW GetFileType GetVolumeInformationW ReadFile SetEndOfFile SetFileInformationByHandle Sleep WriteFile CreateFileMappingW MapViewOfFile UnmapViewOfFile CompareStringW LCMapStringW GetModuleFileNameW LocalAlloc FormatMessageW GetTimeZoneInformation GetEnvironmentStringsW FreeEnvironmentStringsW SetFilePointer ConnectNamedPipe CreateNamedPipeW WaitForMultipleObjectsEx GetExitCodeProcess CreateProcessW GetProcessId GetDateFormatW GetTimeFormatW GetLocaleInfoW LocaleNameToLCID GetCurrencyFormatW GetUserDefaultLCID GetUserPreferredUILanguages GetGeoInfoW GetUserGeoID VirtualQuery OpenFileMappingW FindFirstFileExW FindNextFileW GetComputerNameExW GetNativeSystemInfo OpenProcess K32GetModuleFileNameExW PeekNamedPipe GetOverlappedResult CancelIoEx CreateThreadpoolWait SetThreadpoolWait WaitForThreadpoolWaitCallbacks CloseThreadpoolWait ReleaseSemaphore CreateSemaphoreW GetModuleHandleExW ReleaseMutex CreateMutexW QueryPerformanceCounter QueryPerformanceFrequency ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive WakeConditionVariable WakeAllConditionVariable SleepConditionVariableSRW GetSystemTimeAsFileTime EncodePointer LCMapStringEx GetStringTypeW GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW InitializeSListHead RtlPcToFileHeader RtlUnwindEx InterlockedPushEntrySList InterlockedFlushSList InitializeCriticalSectionAndSpinCount LoadLibraryExW ExitThread FreeLibraryAndExitThread GetCommandLineA SetFileAttributesW SetStdHandle GetConsoleMode ReadConsoleW GetConsoleOutputCP ExitProcess FlsAlloc FlsGetValue FlsSetValue FlsFree IsValidLocale EnumSystemLocalesW GetFileSizeEx SetEnvironmentVariableW IsValidCodePage GetOEMCP WriteConsoleW DeleteCriticalSection InitializeCriticalSectionEx GetProcessHeap HeapSize HeapFree HeapReAlloc HeapAlloc GetLastError DecodePointer LoadLibraryA SetFilePointerEx GetProcAddress

user32

DispatchMessageW PostMessageW CharPrevExA DefWindowProcW RegisterClassW CreateWindowExW DestroyWindow GetQueueStatus MsgWaitForMultipleObjectsEx PeekMessageW SetTimer KillTimer GetWindowLongPtrW GetWindowThreadProcessId EnumWindows PostThreadMessageW SetWindowLongPtrW TranslateMessage UnregisterClassW

userenv

GetUserProfileDirectoryW

authz

AuthzFreeContext AuthzInitializeContextFromSid AuthzInitializeContextFromToken AuthzAccessCheck AuthzInitializeResourceManager AuthzFreeResourceManager

netapi32

NetApiBufferFree NetShareEnum

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

winmm

timeKillEvent timeSetEvent

ws2_32

WSAStartup WSAAsyncSelect WSACleanup

advapi32

GetSidSubAuthority GetTokenInformation SystemFunction036 OpenProcessToken AddAccessAllowedAceEx AddAccessDeniedAceEx AllocateAndInitializeSid CopySid DuplicateToken FreeSid GetLengthSid InitializeAcl GetSidSubAuthorityCount InitializeSecurityDescriptor SetSecurityDescriptorDacl SetSecurityDescriptorGroup SetSecurityDescriptorOwner LookupAccountSidW GetNamedSecurityInfoW RegCloseKey RegCreateKeyExW RegDeleteKeyW RegDeleteValueW RegEnumKeyExW RegEnumValueW RegFlushKey RegOpenKeyExW RegQueryInfoKeyW RegQueryValueExW RegSetValueExW

shell32

CommandLineToArgvW ShellExecuteExW SHCreateItemFromParsingName SHGetKnownFolderPath

ole32

CoInitializeEx CoTaskMemFree CoCreateGuid CoCreateInstance CoUninitialize

oleaut32

SysAllocString SetErrorInfo SysFreeString SysStringLen GetErrorInfo

Name

.text

Size

3.7MB

Virtual Size

3.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

53KB

Virtual Size

78KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

137KB

Virtual Size

136KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.qtmimed

Size

44KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-14_e5a415dcb9baeb450f7cd4eb1274d4a1_glassworm_icedid_luca-stealer_njrat_stealc

kernel32

user32

userenv

authz

netapi32

version

winmm

ws2_32

advapi32

shell32

ole32

oleaut32

generic