General
- Target 2026-08-03_c2dd531ef4883ac3fa08e296ecd1cd72_glassworm_icedid_luca-stealer_njrat
- Size 1.4MB
- Sample260803-rcpanasvat
- SHA256 be0404425d221c9c7066f98cf25f92f27642e948bf55568c8e50729f15978984
- MD5 c2dd531ef4883ac3fa08e296ecd1cd72
- SHA1 2cb78f8667b2752a3682551bd1d89db76a28ad28
- SHA512 24e0a4bfedfc07a77778b49cea9bb6a807556c5e976badd2a2e93985ca1c604e250cb7228b0450f6aab06f52727a4dd829d56b4b1460aa2a9c7bd32bc8040cd6
- SSDEEP 24576:ttXDakGUZwJIvu3FSwnMPUjWw28HcnQ/tbw/2Mkjy6Fr7g0oJ:tJDCU+IviFTeUjWw288Q/lFTjN4
- TLSH T1FC65D065629110F9D87BD1398AC21253FAF2B4122774AEDF0AA48B263F376E1077F705
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_c2dd531ef4883ac3fa08e296ecd1cd72_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_c2dd531ef4883ac3fa08e296ecd1cd72_glassworm_icedid_luca-stealer_njrat
- Size 1.4MB
- SHA256 be0404425d221c9c7066f98cf25f92f27642e948bf55568c8e50729f15978984
- MD5 c2dd531ef4883ac3fa08e296ecd1cd72
- SHA1 2cb78f8667b2752a3682551bd1d89db76a28ad28
- SHA512 24e0a4bfedfc07a77778b49cea9bb6a807556c5e976badd2a2e93985ca1c604e250cb7228b0450f6aab06f52727a4dd829d56b4b1460aa2a9c7bd32bc8040cd6
- SSDEEP 24576:ttXDakGUZwJIvu3FSwnMPUjWw28HcnQ/tbw/2Mkjy6Fr7g0oJ:tJDCU+IviFTeUjWw288Q/lFTjN4
- TLSH T1FC65D065629110F9D87BD1398AC21253FAF2B4122774AEDF0AA48B263F376E1077F705
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1