General
- Target 2026-07-18_ef66c294d7a6330f41c8695853167f58_glassworm_icedid_luca-stealer_njrat_poet-rat_stealc
- Size 4.1MB
- Sample260718-r2ahssg16w
- SHA256 b888a6334a7be25d0baf81842d4dc491c9c212823753c0470328a00a51bcf2f4
- MD5 ef66c294d7a6330f41c8695853167f58
- SHA1 6c384e1ba4e023e55212747604280f94d46092c9
- SHA512 d2ce08c84f61d72472b098cb9488dbb7c45f1bc7915fa9352781a79fda43106189ed93a5b339542af7406375af7d35686a5bb9a6ecd9d33ac659592665d976c8
- SSDEEP 49152:6khn6i/dDo2ZPPDsCxX7JzGs/xRAh+HD7c2wX+UPsPbrJKR6sXPHdrV:xyCrzBROXhqgR6sXPHdr
- TLSH T1D916AD4A32A401F6C47FC0BACA5B8507F77574581360AAC716E4866A2FA3EF15B3F316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_ef66c294d7a6330f41c8695853167f58_glassworm_icedid_luca-stealer_njrat_poet-rat_stealc.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_ef66c294d7a6330f41c8695853167f58_glassworm_icedid_luca-stealer_njrat_poet-rat_stealc
- Size 4.1MB
- SHA256 b888a6334a7be25d0baf81842d4dc491c9c212823753c0470328a00a51bcf2f4
- MD5 ef66c294d7a6330f41c8695853167f58
- SHA1 6c384e1ba4e023e55212747604280f94d46092c9
- SHA512 d2ce08c84f61d72472b098cb9488dbb7c45f1bc7915fa9352781a79fda43106189ed93a5b339542af7406375af7d35686a5bb9a6ecd9d33ac659592665d976c8
- SSDEEP 49152:6khn6i/dDo2ZPPDsCxX7JzGs/xRAh+HD7c2wX+UPsPbrJKR6sXPHdrV:xyCrzBROXhqgR6sXPHdr
- TLSH T1D916AD4A32A401F6C47FC0BACA5B8507F77574581360AAC716E4866A2FA3EF15B3F316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1