General
- Target 2026-07-20_e8ac8c805f1f4672f4adf14b9b877169_glassworm_icedid_luca-stealer_njrat_stealc
- Size 14.7MB
- Sample260720-xe2awsb17l
- SHA256 2e10eb02a6e16c3a7c94be264d7a7868cad1fbf5b1a9b6d3fe31a41be6d41226
- MD5 e8ac8c805f1f4672f4adf14b9b877169
- SHA1 5af136c60b5369b7dc749bd73a7ad40b9f2ba2fd
- SHA512 d97b872e73d4db1233e7fd5c4ce827c8dd2e668569e7b6759df82dff2566a33a2a62d52cd3bb91401cee8ee57e892f3b0c8ccf308c827cd6dd7bc56c8a339224
- SSDEEP 196608:MR2AHZACBNBNw8+xrW+g+RjLqesqk89mSP0tg+htwB0EEfoegBnxKkSIl:qB1w8NnykG+fwkfAxKkS2
- TLSH T10FF6282639F7407DF2A3E9F45FD4F8BE985AF1322A5E787A917103064732942C862739
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-20_e8ac8c805f1f4672f4adf14b9b877169_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_e8ac8c805f1f4672f4adf14b9b877169_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_e8ac8c805f1f4672f4adf14b9b877169_glassworm_icedid_luca-stealer_njrat_stealc
- Size 14.7MB
- SHA256 2e10eb02a6e16c3a7c94be264d7a7868cad1fbf5b1a9b6d3fe31a41be6d41226
- MD5 e8ac8c805f1f4672f4adf14b9b877169
- SHA1 5af136c60b5369b7dc749bd73a7ad40b9f2ba2fd
- SHA512 d97b872e73d4db1233e7fd5c4ce827c8dd2e668569e7b6759df82dff2566a33a2a62d52cd3bb91401cee8ee57e892f3b0c8ccf308c827cd6dd7bc56c8a339224
- SSDEEP 196608:MR2AHZACBNBNw8+xrW+g+RjLqesqk89mSP0tg+htwB0EEfoegBnxKkSIl:qB1w8NnykG+fwkfAxKkS2
- TLSH T10FF6282639F7407DF2A3E9F45FD4F8BE985AF1322A5E787A917103064732942C862739
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables manipulated with Fody
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.