General
- Target 2026-08-06_f6be92637de935752fc6c277543959a2_glassworm_icedid_luca-stealer_njrat
- Size 2.9MB
- Sample260806-bdke4abj7w
- SHA256 ccb56e44c76b19a5eb086ddad3ffc8927e27d187bbaaf4dbd33b7d8d2b69d786
- MD5 f6be92637de935752fc6c277543959a2
- SHA1 3ab87f7900f7a2bd2892258d34ee69103ef549a0
- SHA512 be33dd8fd6fefb5e8d39ad194761226fc4cff5fa8cec8a90a0a57f522770686041eb7855460b38eaed6022f8bb084a26f937228de7ec20614340e1a59577c327
- SSDEEP 49152:tW8Oqg+daEMumSLFvnZheWjH+hNeBQ5koVRVxmKCPGummfovlt:tBpWikaeCShHkez
- TLSH T175E5E13273E6C0E4E967C1F1C92196B6DA72749143B84AEB25E08E2EDF636F00977711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_f6be92637de935752fc6c277543959a2_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_f6be92637de935752fc6c277543959a2_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_f6be92637de935752fc6c277543959a2_glassworm_icedid_luca-stealer_njrat
- Size 2.9MB
- SHA256 ccb56e44c76b19a5eb086ddad3ffc8927e27d187bbaaf4dbd33b7d8d2b69d786
- MD5 f6be92637de935752fc6c277543959a2
- SHA1 3ab87f7900f7a2bd2892258d34ee69103ef549a0
- SHA512 be33dd8fd6fefb5e8d39ad194761226fc4cff5fa8cec8a90a0a57f522770686041eb7855460b38eaed6022f8bb084a26f937228de7ec20614340e1a59577c327
- SSDEEP 49152:tW8Oqg+daEMumSLFvnZheWjH+hNeBQ5koVRVxmKCPGummfovlt:tBpWikaeCShHkez
- TLSH T175E5E13273E6C0E4E967C1F1C92196B6DA72749143B84AEB25E08E2EDF636F00977711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger