General
- Target 2026-07-18_c8e32e60a9b649e79e3ffb4b97129563_amadey_glassworm_icedid_luca-stealer_njrat_remcos_stealc
- Size 7.6MB
- Sample260718-a6hljaaz2l
- SHA256 61b89b6887d5c657ab505b028416f8a6155dba18fd043a3d58457b3145095066
- MD5 c8e32e60a9b649e79e3ffb4b97129563
- SHA1 750fa661499fbb9d261a7aac5aac01faecaee3bd
- SHA512 d6a1a14d020d6c5bc53a392a1eea3570681bd87ebfc7dcf0bb75afa819a5c672f7105ea454ae3ae97445deaaacf3afdc2049ff4b56776ec4d1d74c7b58ccf36c
- SSDEEP 196608:TaNNG6Gbdf00HQOb7GN3ubEn2puqEIyZ97+KiBRNvC4m:YNG6Gbdf00HQOb6N2Eouq2E70
- TLSH T11286F04A7AD410B9E067C37CCA435A1BF7B1B40907206BDF1BA4A6622F23BD11E7E715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-07-18_c8e32e60a9b649e79e3ffb4b97129563_amadey_glassworm_icedid_luca-stealer_njrat_remcos_stealc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_c8e32e60a9b649e79e3ffb4b97129563_amadey_glassworm_icedid_luca-stealer_njrat_remcos_stealc.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_c8e32e60a9b649e79e3ffb4b97129563_amadey_glassworm_icedid_luca-stealer_njrat_remcos_stealc
- Size 7.6MB
- SHA256 61b89b6887d5c657ab505b028416f8a6155dba18fd043a3d58457b3145095066
- MD5 c8e32e60a9b649e79e3ffb4b97129563
- SHA1 750fa661499fbb9d261a7aac5aac01faecaee3bd
- SHA512 d6a1a14d020d6c5bc53a392a1eea3570681bd87ebfc7dcf0bb75afa819a5c672f7105ea454ae3ae97445deaaacf3afdc2049ff4b56776ec4d1d74c7b58ccf36c
- SSDEEP 196608:TaNNG6Gbdf00HQOb7GN3ubEn2puqEIyZ97+KiBRNvC4m:YNG6Gbdf00HQOb6N2Eouq2E70
- TLSH T11286F04A7AD410B9E067C37CCA435A1BF7B1B40907206BDF1BA4A6622F23BD11E7E715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Allows Network login with blank passwords
Allows local user accounts with blank passwords to access device from the network.
-
Executes dropped EXE
-
Drops file in System32 directory