General
- Target 2026-07-23_c47a9a3de1eff53a68c5f5dc858776b9_elex_glassworm_icedid_luca-stealer_njrat_stealc_swisyn
- Size 2.2MB
- Sample260723-bf8kpsef27
- SHA256 7ca7837db48d89b1a7ed6cabc2682d5115497c8b6bf73535f4298734e82e757f
- MD5 c47a9a3de1eff53a68c5f5dc858776b9
- SHA1 84db31eba7f4bb412c00d328a990b29fb062c2ce
- SHA512 b130fc2edbc713a2695e6c0ae08832b1c25c62fb7e2124976a3769b75c957b5f9f158e0e83f47b82d8434480268688e3d913e520a2387d84c372ae02562c404b
- SSDEEP 49152:s+ygk7hUgCJJL4SAr0DbRbsjf3XoaHZKObJ:i+gCJJL4SAabsr3YakObJ
- TLSH T114B57D1723D800E8E16AD27489A7C63AE6737C5507B286DF16E84E4F3F33AD51939722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-23_c47a9a3de1eff53a68c5f5dc858776b9_elex_glassworm_icedid_luca-stealer_njrat_stealc_swisyn.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-07-23_c47a9a3de1eff53a68c5f5dc858776b9_elex_glassworm_icedid_luca-stealer_njrat_stealc_swisyn.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target 2026-07-23_c47a9a3de1eff53a68c5f5dc858776b9_elex_glassworm_icedid_luca-stealer_njrat_stealc_swisyn
- Size 2.2MB
- SHA256 7ca7837db48d89b1a7ed6cabc2682d5115497c8b6bf73535f4298734e82e757f
- MD5 c47a9a3de1eff53a68c5f5dc858776b9
- SHA1 84db31eba7f4bb412c00d328a990b29fb062c2ce
- SHA512 b130fc2edbc713a2695e6c0ae08832b1c25c62fb7e2124976a3769b75c957b5f9f158e0e83f47b82d8434480268688e3d913e520a2387d84c372ae02562c404b
- SSDEEP 49152:s+ygk7hUgCJJL4SAr0DbRbsjf3XoaHZKObJ:i+gCJJL4SAabsr3YakObJ
- TLSH T114B57D1723D800E8E16AD27489A7C63AE6737C5507B286DF16E84E4F3F33AD51939722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Drops file in Drivers directory
-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Create or Modify System Process
1Windows Service
1