General
- Target 2026-07-22_113423fbd3221a2d1e7e2f09b2634486_glassworm_icedid_luca-stealer_njrat
- Size 1.7MB
- Sample260723-ap6l2aed28
- SHA256 4cd602fdb60037ff631fcccd4a2cc5806cfdaf360eab0960e15f40f72bf8b7fd
- MD5 113423fbd3221a2d1e7e2f09b2634486
- SHA1 bc604d0ed2db34cb8e128530e3e1157ea2c7a982
- SHA512 6f0382bea06e85169acd545a4b3b4a2b0965d9b3f41888eae464637323cc4e3fdf97dc2f941d219c296ed149aa3646511d2efbd548141056a79f353f94721eca
- SSDEEP 49152:xs4ioC7pzJdOiMqQuPi5lFH3VlKOqfL7dUFk:GLMqQbrFXVlKRlUF
- TLSH T1E885F15992A400F8D1B7D274CE56890BE772FC094BB0A64F33DD59960F736A09E3E722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-22_113423fbd3221a2d1e7e2f09b2634486_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_113423fbd3221a2d1e7e2f09b2634486_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
751stealer
C2
-
http://stealer.best
Attributes
-
owner_id
7511aabbccddeeff
Targets
-
- Target 2026-07-22_113423fbd3221a2d1e7e2f09b2634486_glassworm_icedid_luca-stealer_njrat
- Size 1.7MB
- SHA256 4cd602fdb60037ff631fcccd4a2cc5806cfdaf360eab0960e15f40f72bf8b7fd
- MD5 113423fbd3221a2d1e7e2f09b2634486
- SHA1 bc604d0ed2db34cb8e128530e3e1157ea2c7a982
- SHA512 6f0382bea06e85169acd545a4b3b4a2b0965d9b3f41888eae464637323cc4e3fdf97dc2f941d219c296ed149aa3646511d2efbd548141056a79f353f94721eca
- SSDEEP 49152:xs4ioC7pzJdOiMqQuPi5lFH3VlKOqfL7dUFk:GLMqQbrFXVlKRlUF
- TLSH T1E885F15992A400F8D1B7D274CE56890BE772FC094BB0A64F33DD59960F736A09E3E722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.