General
- Target 2026-08-02_742a209cfaf4108fe61bcc60649be190_elex_glassworm_icedid_luca-stealer_njrat_swisyn
- Size 22.9MB
- Sample260802-wpjyxsdp6y
- SHA256 c2cfa146acd3301318313017e66d51d252c6ab67065352837345f1fccc6708cf
- MD5 742a209cfaf4108fe61bcc60649be190
- SHA1 0108e9bb3a5e33951b8f7ef45ba6235143c23af2
- SHA512 aa665096894130dd3663d263a075a48cf77bad25f6a6a5737f271b126dc6e9390b275f129d14635c12e7829e1af2be12be378181517ca65448038f9d7c541f88
- SSDEEP 393216:I82d4sG1p9HnwxbtpTjB9VsB5YzL+S5LPDSM4pNXtbx1F5YSr2uuBBrMv1+7YkHc:H2Zap5nwxDLcQqQL7Spjtbx1F1JcrV7+
- TLSH T130373315E44010FBD7D6013B59AFD331E672AC222723DA8F4798B3551D636C2AAB6E33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_742a209cfaf4108fe61bcc60649be190_elex_glassworm_icedid_luca-stealer_njrat_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_742a209cfaf4108fe61bcc60649be190_elex_glassworm_icedid_luca-stealer_njrat_swisyn.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_742a209cfaf4108fe61bcc60649be190_elex_glassworm_icedid_luca-stealer_njrat_swisyn
- Size 22.9MB
- SHA256 c2cfa146acd3301318313017e66d51d252c6ab67065352837345f1fccc6708cf
- MD5 742a209cfaf4108fe61bcc60649be190
- SHA1 0108e9bb3a5e33951b8f7ef45ba6235143c23af2
- SHA512 aa665096894130dd3663d263a075a48cf77bad25f6a6a5737f271b126dc6e9390b275f129d14635c12e7829e1af2be12be378181517ca65448038f9d7c541f88
- SSDEEP 393216:I82d4sG1p9HnwxbtpTjB9VsB5YzL+S5LPDSM4pNXtbx1F5YSr2uuBBrMv1+7YkHc:H2Zap5nwxDLcQqQL7Spjtbx1F1JcrV7+
- TLSH T130373315E44010FBD7D6013B59AFD331E672AC222723DA8F4798B3551D636C2AAB6E33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory