General
- Target 2026-07-22_8b62745014cb3f4fccecc77a9a400eaf_glassworm_icedid_luca-stealer_njrat
- Size 2.3MB
- Sample260722-gf456sba74
- SHA256 cc26514389624bcf6f5236bbf046324bd1d6af1fede772efaf45c59963c5475e
- MD5 8b62745014cb3f4fccecc77a9a400eaf
- SHA1 e77a22bc599acbc2a2f3537201c42dc0fa77510e
- SHA512 68086e7cadf5d0049ec9177c87786ce4a378d9745d9a5e2889bd54e395475a2eba05c14880f303c3ab3080b81543eb0bbd7524e11e89fe5a089e4efcbfa3570e
- SSDEEP 49152:5LZfdlQPy05wnqF4AOob8vThuDA3HWnGAB:5L45B80t
- TLSH T106B59E46A2A900FDD877C138CD462217F772B4081774ABEB55A089A92F33FE13A7E715
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-22_8b62745014cb3f4fccecc77a9a400eaf_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_8b62745014cb3f4fccecc77a9a400eaf_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
siriusrat
C2
-
46.16.34.62:4449
Targets
-
- Target 2026-07-22_8b62745014cb3f4fccecc77a9a400eaf_glassworm_icedid_luca-stealer_njrat
- Size 2.3MB
- SHA256 cc26514389624bcf6f5236bbf046324bd1d6af1fede772efaf45c59963c5475e
- MD5 8b62745014cb3f4fccecc77a9a400eaf
- SHA1 e77a22bc599acbc2a2f3537201c42dc0fa77510e
- SHA512 68086e7cadf5d0049ec9177c87786ce4a378d9745d9a5e2889bd54e395475a2eba05c14880f303c3ab3080b81543eb0bbd7524e11e89fe5a089e4efcbfa3570e
- SSDEEP 49152:5LZfdlQPy05wnqF4AOob8vThuDA3HWnGAB:5L45B80t
- TLSH T106B59E46A2A900FDD877C138CD462217F772B4081774ABEB55A089A92F33FE13A7E715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.