General
- Target 2026-07-27_d394e14d1b32f3269ba9539f0c6862a8_glassworm_icedid_luca-stealer_njrat
- Size 2.7MB
- Sample260727-m7rl2s1vez
- SHA256 d77ac1d5c7655951c44f7027ecb13b6ad6b1362ae7dcdd1b5f3cf48a44563aa4
- MD5 d394e14d1b32f3269ba9539f0c6862a8
- SHA1 acfd9ca5d94c2a5fe986b515b33b3277f875b88b
- SHA512 7b7bdf2ffe43808678f8f6f232e991adb20a731727092f97652ffe4f543244142fa5a0d8f51449a82b183cd309570c168fd5d0c5d4fb7e1f55e24ca446e4326a
- SSDEEP 49152:DXQON8BUusLCoo+VK4MmA4Opw6C6fIZ2D9+ps/PsAvMpmD:L3zjA9VZ9cq3sYt
- TLSH T139D5E14EA36800FCD1B7C2B5CF464A47D7B2B8465630A79F23E48AD61F276615E3E312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-27_d394e14d1b32f3269ba9539f0c6862a8_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_d394e14d1b32f3269ba9539f0c6862a8_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_d394e14d1b32f3269ba9539f0c6862a8_glassworm_icedid_luca-stealer_njrat
- Size 2.7MB
- SHA256 d77ac1d5c7655951c44f7027ecb13b6ad6b1362ae7dcdd1b5f3cf48a44563aa4
- MD5 d394e14d1b32f3269ba9539f0c6862a8
- SHA1 acfd9ca5d94c2a5fe986b515b33b3277f875b88b
- SHA512 7b7bdf2ffe43808678f8f6f232e991adb20a731727092f97652ffe4f543244142fa5a0d8f51449a82b183cd309570c168fd5d0c5d4fb7e1f55e24ca446e4326a
- SSDEEP 49152:DXQON8BUusLCoo+VK4MmA4Opw6C6fIZ2D9+ps/PsAvMpmD:L3zjA9VZ9cq3sYt
- TLSH T139D5E14EA36800FCD1B7C2B5CF464A47D7B2B8465630A79F23E48AD61F276615E3E312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.