General
- Target 2026-08-03_79df3d2c3cb1a1c919ea656f7479b3c5_glassworm_icedid_luca-stealer_njrat_stealc
- Size 1.4MB
- Sample260804-c8yfwabg76
- SHA256 0dce7c7c471a1b507b3f5cc57cfdf69f36b8958e7b0298ef36f2dcb352b4eec8
- MD5 79df3d2c3cb1a1c919ea656f7479b3c5
- SHA1 04fcabd4a1ab5e6c1dd832ed658cf2bc36d7cd56
- SHA512 eb36bf1af681d7021b00a54b14fbbcec79f1ba777dd3dbc436de508695ff92c38ccc808e45b9bda90ae1f49ef8710c652f60de0123ed951cf3191425ea7a3f7f
- SSDEEP 24576:C6dHLN0DHu2CRz+7r4pa0/vTVh0lhSMXlhwqsqjnhMgeiCl7G0nehbGZpbD:C6dHLN0DHu/Rg0plodDmg27RnWGj
- TLSH T1F365D01AE79801F8D47AC279C6A2654AF6B37C4657605ACB139135AB3F336E04E3F702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_79df3d2c3cb1a1c919ea656f7479b3c5_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_79df3d2c3cb1a1c919ea656f7479b3c5_glassworm_icedid_luca-stealer_njrat_stealc
- Size 1.4MB
- SHA256 0dce7c7c471a1b507b3f5cc57cfdf69f36b8958e7b0298ef36f2dcb352b4eec8
- MD5 79df3d2c3cb1a1c919ea656f7479b3c5
- SHA1 04fcabd4a1ab5e6c1dd832ed658cf2bc36d7cd56
- SHA512 eb36bf1af681d7021b00a54b14fbbcec79f1ba777dd3dbc436de508695ff92c38ccc808e45b9bda90ae1f49ef8710c652f60de0123ed951cf3191425ea7a3f7f
- SSDEEP 24576:C6dHLN0DHu2CRz+7r4pa0/vTVh0lhSMXlhwqsqjnhMgeiCl7G0nehbGZpbD:C6dHLN0DHu/Rg0plodDmg27RnWGj
- TLSH T1F365D01AE79801F8D47AC279C6A2654AF6B37C4657605ACB139135AB3F336E04E3F702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1