2026-07-30_9fbce097082afdffa88ccaaded92b7e0_glassworm_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-30_9fbce097082afdffa88ccaaded92b7e0_glassworm_icedid_luca-stealer_njrat_stealc
Size 1.8MB
Sample260730-vslfgsshrb
SHA256 0724f279d24ae2d04c677f9c00916df14c7eea5b59f369c27584b64f4e8f3bfd
MD5 9fbce097082afdffa88ccaaded92b7e0
SHA1 702df2433051d1a3a07d76775a00ee2a3f67749d
SHA512 7dddd165e701be3471d7202fe5e9fd8b136659efd13dcf1261749a0838995e3c9d20c8d61d41558d7f400654196d0c2b9f44976f961418c5aa4997cad63f2e82
SSDEEP 24576:QRAWYZTjT1AF0oJJNZv9ss82h1e1dhAy3IfnBcZVbX56mctvE/BT76+1NCE:/djTbG19V41dhAJnGVbJ6mGvKVO+n1
TLSH
T1EE95DF46A2B400F9D0B7C1B8C546A31BE671385517608BDB23E89B693F73BE06A7F711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-30_9fbce097082afdffa88ccaaded92b7e0_glassworm_icedid_luca-stealer_njrat_stealc

File Explorer

2026-07-30_9fbce097082afdffa88ccaaded92b7e0_glassworm_icedid_luca-stealer_njrat_stealc

.exe 1.8MB

2026-07-30_9fbce097082afdffa88ccaaded92b7e0_glassworm_icedid_luca-stealer_njrat_stealc

IMPHASH d997cdc3b58ac93042443d8a4648cbd7
SHA256 0724f279d24ae2d04c677f9c00916df14c7eea5b59f369c27584b64f4e8f3bfd
MD5 9fbce097082afdffa88ccaaded92b7e0
SHA1 702df2433051d1a3a07d76775a00ee2a3f67749d
SHA512 7dddd165e701be3471d7202fe5e9fd8b136659efd13dcf1261749a0838995e3c9d20c8d61d41558d7f400654196d0c2b9f44976f961418c5aa4997cad63f2e82
SSDEEP 24576:QRAWYZTjT1AF0oJJNZv9ss82h1e1dhAy3IfnBcZVbX56mctvE/BT76+1NCE:/djTbG19V41dhAJnGVbJ6mGvKVO+n1
TLSH
T1EE95DF46A2B400F9D0B7C1B8C546A31BE671385517608BDB23E89B693F73BE06A7F711
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

450404

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

z:\dev\hudsight-2\obj\HudSightEditor-Release-x64\HudSightEditor64.pdb

kernel32

GetFileInformationByHandle SystemTimeToTzSpecificLocalTime FileTimeToSystemTime GetTimeZoneInformation GetCurrentDirectoryW GetDriveTypeW UnmapViewOfFile MapViewOfFile GetLastError CreateFileMappingW OpenFileMappingW GetFileAttributesExW RtlUnwind WaitForMultipleObjects PeekNamedPipe GetEnvironmentVariableA GetTickCount WriteConsoleW GetSystemDirectoryW SleepEx FormatMessageW GetFullPathNameW DecodePointer SetEndOfFile HeapReAlloc HeapSize ReadConsoleW CloseHandle MoveFileExW ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead LoadLibraryW GetProcAddress CreateFileW DeleteFileW FreeLibrary FormatMessageA LocalFree VerifyVersionInfoW VerSetConditionMask VirtualProtect CreateDirectoryW GetFileAttributesW WaitForSingleObjectEx RaiseException GetModuleFileNameW GetLocalTime GetUserDefaultLocaleName FindFirstFileW FindNextFileW FindClose MultiByteToWideChar WideCharToMultiByte GlobalAlloc GlobalLock GlobalUnlock GetTimeFormatW InitializeCriticalSection DeleteCriticalSection CreateMutexW WriteFile lstrlenW WaitForSingleObject OutputDebugStringA ReleaseMutex InitializeCriticalSectionEx EnterCriticalSection LeaveCriticalSection SetLastError GetFileSize ReadFile GetCommandLineW GlobalFree GetModuleHandleA LoadLibraryA QueryPerformanceFrequency RtlUnwindEx RtlPcToFileHeader EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW ExitProcess GetModuleHandleExW GetStdHandle CreateThread ExitThread FreeLibraryAndExitThread FlsAlloc FlsGetValue FlsSetValue FlsFree GetDateFormatW CompareStringW LCMapStringW HeapFree HeapAlloc GetFileType FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle GetStringTypeW SetFilePointerEx GetFileSizeEx GetConsoleOutputCP GetConsoleMode FlushFileBuffers Sleep

user32

SetClipboardData GetClipboardData EmptyClipboard CloseClipboard OpenClipboard GetCursorPos ReleaseDC SetCursorPos IsIconic SetForegroundWindow ReleaseCapture SetProcessDPIAware SetCapture BringWindowToTop SetFocus SetLayeredWindowAttributes TrackMouseEvent IsChild ClientToScreen GetMonitorInfoW GetCapture WindowFromPoint UnregisterClassW ScreenToClient SetWindowPos GetDC DestroyWindow GetKeyState AdjustWindowRectEx SetCursor GetClientRect UpdateWindow ShowWindow TranslateMessage DispatchMessageW GetForegroundWindow GetWindowPlacement SetWindowTextW BeginPaint EndPaint PostQuitMessage GetSystemMetrics InvalidateRect DefWindowProcW LoadIconW LoadCursorW SetWindowLongW MonitorFromWindow GetWindowLongW PeekMessageW RegisterClassExW CreateWindowExW MessageBoxW EnumDisplayMonitors

d3d11

D3D11CreateDeviceAndSwapChain

uxtheme

GetThemeSysFont

comctl32

InitCommonControlsEx

gdiplus

GdipCreatePen2 GdipDeleteBrush GdipAlloc GdiplusShutdown GdiplusStartup GdipDrawEllipseI GdipCreateSolidFill GdipBitmapUnlockBits GdipBitmapLockBits GdipResetWorldTransform GdipTranslateWorldTransform GdipGraphicsClear GdipSetSmoothingMode GdipGetImageGraphicsContext GdipDisposeImage GdipCloneImage GdipCreateBitmapFromScan0 GdipDeletePen GdipRotateWorldTransform GdipDrawLineI GdipDrawLinesI GdipSetPenStartCap GdipSetPenEndCap GdipDrawLine GdipDrawRectangleI GdipFillRectangleI GdipFree

shlwapi

PathCanonicalizeW

winmm

timeGetTime

dwrite

DWriteCreateFactory

secur32

GetUserNameExW

imm32

ImmSetCandidateWindow ImmSetCompositionWindow ImmReleaseContext ImmGetContext ImmAssociateContextEx

d3dcompiler_47

D3DCompile

gdi32

GetDeviceCaps

advapi32

CryptHashData LookupAccountNameW AllocateAndInitializeSid ConvertStringSidToSidW SetEntriesInAclW GetUserNameW ConvertSidToStringSidW GetTokenInformation OpenProcessToken FreeSid GetNamedSecurityInfoW SetNamedSecurityInfoW GetSecurityDescriptorSacl ConvertStringSecurityDescriptorToSecurityDescriptorW CryptEncrypt CryptImportKey CryptDestroyKey CryptDestroyHash CryptReleaseContext CryptCreateHash CryptGenRandom CryptGetHashParam CryptAcquireContextW

shell32

SHGetSpecialFolderPathW SHGetFolderPathW

ole32

CoUninitialize CoInitializeEx CoCreateInstance

oleaut32

VariantInit

wldap32

ord167 ord142 ord79 ord133 ord147 ord117 ord41 ord208 ord73 ord216 ord27 ord14 ord301 ord46 ord219 ord145 ord26 ord127

ws2_32

getsockname connect bind recv gethostname ioctlsocket sendto recvfrom freeaddrinfo WSAGetLastError closesocket getaddrinfo listen htonl accept select getpeername __WSAFDIsSet WSAIoctl WSASetLastError socket setsockopt ntohs htons send WSACloseEvent WSACreateEvent WSAEnumNetworkEvents WSAEventSelect getsockopt

crypt32

CertFindCertificateInStore CertFreeCertificateContext CertEnumCertificatesInStore CertCloseStore CertOpenStore CryptStringToBinaryW PFXImportCertStore CryptDecodeObjectEx CertAddCertificateContextToStore CertFindExtension CertGetNameStringW CryptQueryObject CertCreateCertificateChainEngine CertFreeCertificateChain CertFreeCertificateChainEngine CertGetCertificateChain

Name

.text

Size

909KB

Virtual Size

908KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

277KB

Virtual Size

276KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

44KB

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

72KB

Virtual Size

71KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

568KB

Virtual Size

572KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-30_9fbce097082afdffa88ccaaded92b7e0_glassworm_icedid_luca-stealer_njrat_stealc

kernel32

user32

d3d11

uxtheme

comctl32

gdiplus

shlwapi

winmm

dwrite

secur32

imm32

d3dcompiler_47

gdi32

advapi32

shell32

ole32

oleaut32

wldap32

ws2_32

crypt32

generic