General
- Target 2026-07-27_09dd1ff525fb8d23b7b99169b29a773b_glassworm_icedid_luca-stealer_njrat
- Size 2.7MB
- Sample260727-eefp3svxet
- SHA256 fe3518e01aa4fb0b5c05c6e7ea53e2e6b59caf3aea388458cdb29a5c8401a910
- MD5 09dd1ff525fb8d23b7b99169b29a773b
- SHA1 98ff9f7c96d23dd42d5173c23cdc2e8a9fb5c088
- SHA512 b429072e57399693b8d20e4a7d0fb8122f83c7e2c29ed53326de8b185e9dbc6020b6364b574490a55400c7879e106efff6e7f7e80055fd74df06c7cc96c80e46
- SSDEEP 49152:5IhqK0byTx/H8xjigE12dF8YPJ2q5FkWGcaUeI+xdWUxkT72mgv:vby9/chigj/1ZeZHW+pv
- TLSH T17BD5E00FA76801F9D0A7C2B5CF465A07D7B2B8464270A79F13E5CAD61F276614E3E322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-27_09dd1ff525fb8d23b7b99169b29a773b_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_09dd1ff525fb8d23b7b99169b29a773b_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_09dd1ff525fb8d23b7b99169b29a773b_glassworm_icedid_luca-stealer_njrat
- Size 2.7MB
- SHA256 fe3518e01aa4fb0b5c05c6e7ea53e2e6b59caf3aea388458cdb29a5c8401a910
- MD5 09dd1ff525fb8d23b7b99169b29a773b
- SHA1 98ff9f7c96d23dd42d5173c23cdc2e8a9fb5c088
- SHA512 b429072e57399693b8d20e4a7d0fb8122f83c7e2c29ed53326de8b185e9dbc6020b6364b574490a55400c7879e106efff6e7f7e80055fd74df06c7cc96c80e46
- SSDEEP 49152:5IhqK0byTx/H8xjigE12dF8YPJ2q5FkWGcaUeI+xdWUxkT72mgv:vby9/chigj/1ZeZHW+pv
- TLSH T17BD5E00FA76801F9D0A7C2B5CF465A07D7B2B8464270A79F13E5CAD61F276614E3E322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.