General
- Target 2026-08-01_cf0652aa67463afbf53837c1d58f3e2e_glassworm_icedid_luca-stealer_njrat
- Size 2.3MB
- Sample260801-3q37hsae76
- SHA256 b36da2538653d36eb4e15d984b7c3083a60fc2af333b9ce5caee108af90cf539
- MD5 cf0652aa67463afbf53837c1d58f3e2e
- SHA1 eccfb7d89b89c7cab8eb81bbbf6b28ea253f92d4
- SHA512 58f54518855e826b3c855f8475dd0dc00b68297ed506d57c9f1adb7e704933ecfa39adeb6e28a4dedae73d5145bbbf431a9b47a1f85592ac473688aabf381536
- SSDEEP 24576:Q5uYyQO8hVDs/5IdhtQFujoh6m6vBsZZ5PXQBJOKdkjnoor0PfSIgZlHVvtRJQOc:Uno8haujVsPAB8KY2+Bz+2
- TLSH T150B57D1763AD01ECD4A3C0B888563313EBF6740517789BDB52F08DAA6F63BD226B9750
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-01_cf0652aa67463afbf53837c1d58f3e2e_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_cf0652aa67463afbf53837c1d58f3e2e_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_cf0652aa67463afbf53837c1d58f3e2e_glassworm_icedid_luca-stealer_njrat
- Size 2.3MB
- SHA256 b36da2538653d36eb4e15d984b7c3083a60fc2af333b9ce5caee108af90cf539
- MD5 cf0652aa67463afbf53837c1d58f3e2e
- SHA1 eccfb7d89b89c7cab8eb81bbbf6b28ea253f92d4
- SHA512 58f54518855e826b3c855f8475dd0dc00b68297ed506d57c9f1adb7e704933ecfa39adeb6e28a4dedae73d5145bbbf431a9b47a1f85592ac473688aabf381536
- SSDEEP 24576:Q5uYyQO8hVDs/5IdhtQFujoh6m6vBsZZ5PXQBJOKdkjnoor0PfSIgZlHVvtRJQOc:Uno8haujVsPAB8KY2+Bz+2
- TLSH T150B57D1763AD01ECD4A3C0B888563313EBF6740517789BDB52F08DAA6F63BD226B9750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.