Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/07/2026, 19:14
Behavioral task
behavioral1
Sample
2026-07-30_a1f891545178f54d998d0fc9f3532d9a_dcrat_elex_glassworm_icedid_luca-stealer_njrat_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_a1f891545178f54d998d0fc9f3532d9a_dcrat_elex_glassworm_icedid_luca-stealer_njrat_vidar.exe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
General
- Target 2026-07-30_a1f891545178f54d998d0fc9f3532d9a_dcrat_elex_glassworm_icedid_luca-stealer_njrat_vidar.exe
- Size 47.9MB
- Sample260730-xx377sec73
- SHA256 49252c7a936bc63a8aea922d86819917aa6df87b7b931c0da48d795a5e263ed3
- MD5 a1f891545178f54d998d0fc9f3532d9a
- SHA1 7518b65dfead6f54bb40b709c6bc757693872ff7
- SHA512 d50433ed1f3de6ad8aadd6b95bb7c8d8a6ff23c89596a28993eeabb34c14dcd7d8a7a5e739e9cb2177cabcdcfbc90d7d7dd587407abe3c558ff9708cd789be34
- SSDEEP 393216:s0iFW3biLa3L9NJ7W51AmOW1ZEk3Jp5LasM8GHB595zxhGjO6zRmqQvMsad276W/:bi03biGRN1+qbwewbkxDQRRRd2XEq
- TLSH T1DFB76B8252A87CD2C032A630D7BB8FF1C769AC559628924F1081FE473D3A753B95B3E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Malware Config
Signatures
- Detects executables manipulated with Fody 1 IoCs
resource yara_rule behavioral2/memory/3628-2-0x0000020B7BB70000-0x0000020B7EB56000-memory.dmp INDICATOR_EXE_Packed_Fody - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS 2026-07-30_a1f891545178f54d998d0fc9f3532d9a_dcrat_elex_glassworm_icedid_luca-stealer_njrat_vidar.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer 2026-07-30_a1f891545178f54d998d0fc9f3532d9a_dcrat_elex_glassworm_icedid_luca-stealer_njrat_vidar.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemVersion 2026-07-30_a1f891545178f54d998d0fc9f3532d9a_dcrat_elex_glassworm_icedid_luca-stealer_njrat_vidar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-30_a1f891545178f54d998d0fc9f3532d9a_dcrat_elex_glassworm_icedid_luca-stealer_njrat_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-30_a1f891545178f54d998d0fc9f3532d9a_dcrat_elex_glassworm_icedid_luca-stealer_njrat_vidar.exe"1⤵
- Enumerates system info in registry
PID:3628