Analysis
- max time kernel
150s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
06/08/2026, 05:05
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-06_ddf23938656c0c9a1ce4e193ab1622af_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_ddf23938656c0c9a1ce4e193ab1622af_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-06_ddf23938656c0c9a1ce4e193ab1622af_glassworm_icedid_luca-stealer_njrat_stealc.exe
- Size 12.3MB
- Sample260806-frbsbstdkf
- SHA256 aedd22a87c90da542af52f17667ed7f8404e91df945e2127893c2e72d66226e5
- MD5 ddf23938656c0c9a1ce4e193ab1622af
- SHA1 c28c8f18f1b695a3f9d6c74880ccad8e8ddc6887
- SHA512 4d3353d4a6e785cd873beba1e5c8cf3853a767d290e875e836f6d76b2edb20e7ba93c9aee0a71812ff4b38d1c7cefd591579c368c61c8312f99a0800d8433d42
- SSDEEP 196608:4lfXo0/ku5/JvhVgj4rpz8A8PqEeKGWMW/vDQHi8LnCORsOJvZ+:4esvh6489eNWMM4NRRssvZ+
- TLSH T17CD6122AF2658579C137D135C9425127F93A38CAD732A0DF77E4088E4EA36D4877ABB0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3752 2026-08-06_ddf23938656c0c9a1ce4e193ab1622af_glassworm_icedid_luca-stealer_njrat_stealc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_ddf23938656c0c9a1ce4e193ab1622af_glassworm_icedid_luca-stealer_njrat_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-06_ddf23938656c0c9a1ce4e193ab1622af_glassworm_icedid_luca-stealer_njrat_stealc.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:3752
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\Desktop\Watcher_log.txt
- Size 1KB
- SHA256 1e4dbd1adc910d88c50841519e40a2b73120d744c8132f1e4fcf5782b1304107
- MD5 968a3257a85f28b483003766ab3f46c5
- SHA1 a1ecbe73e14ae54cd187863556cafa3f11666086
- SHA512 710a33d2fd707e0be4932670e9e546637130d8292a903c71a35c5f794468597bd196cb8cdc033555f8171beb232570a8078ae0c8793c8b799ac39f24910e1d5b
- TLSH T16211C62584DBE4E07765BC41822887CA349E6A5F6E8A61136F885C00F812F6F72E03B8
- MD5 SHA1 SHA512 TLSH