2026-08-07_81c32a73dfac3ae13c70f0f60e848cd8_glassworm_icedid_luca-stealer_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-07_81c32a73dfac3ae13c70f0f60e848cd8_glassworm_icedid_luca-stealer_njrat
Size 17.0MB
Sample260808-bevbpazvas
SHA256 5740eefb4b150b9568cd27555571fd0ae55936d0b579252293922ff767d7aa01
MD5 81c32a73dfac3ae13c70f0f60e848cd8
SHA1 126642f60438e195e7cfe3aae5188a787ed59ec5
SHA512 989d7ca6691a14986656b5adbbf1e14083fd6afea6cf7bd5c445e1489c6747ca9e629af921aeadbdfbb1712c2c2957026d787d25b7beb375aa8452f36edcc052
SSDEEP 393216:OeToK5crUtZq5XwhaCrnCG7LD2SN87fa4wb9AZX:OeTRcrUtZq5AaCrnCSX2SO7nG9KX
TLSH
T11C07335523E42C97D8A7823DD29A86B9E7B1B5613731DBEF274203191F67AC00D3E788
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-07_81c32a73dfac3ae13c70f0f60e848cd8_glassworm_icedid_luca-stealer_njrat

File Explorer

2026-08-07_81c32a73dfac3ae13c70f0f60e848cd8_glassworm_icedid_luca-stealer_njrat

.exe 17.0MB
testers-app.pyc

358B

2026-08-07_81c32a73dfac3ae13c70f0f60e848cd8_glassworm_icedid_luca-stealer_njrat

IMPHASH e1c1717bed355192c1c8a89b80c10f77
SHA256 5740eefb4b150b9568cd27555571fd0ae55936d0b579252293922ff767d7aa01
MD5 81c32a73dfac3ae13c70f0f60e848cd8
SHA1 126642f60438e195e7cfe3aae5188a787ed59ec5
SHA512 989d7ca6691a14986656b5adbbf1e14083fd6afea6cf7bd5c445e1489c6747ca9e629af921aeadbdfbb1712c2c2957026d787d25b7beb375aa8452f36edcc052
SSDEEP 393216:OeToK5crUtZq5XwhaCrnCG7LD2SN87fa4wb9AZX:OeTRcrUtZq5AaCrnCSX2SO7nG9KX
TLSH
T11C07335523E42C97D8A7823DD29A86B9E7B1B5613731DBEF274203191F67AC00D3E788
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

msvcrt

memset memcpy strncmp memmove strncpy strstr _strnicmp _stricmp strlen strcmp sprintf fabs ceil malloc floor free fclose strcpy tolower

kernel32

GetModuleHandleA HeapCreate GetCommandLineA RemoveDirectoryA GetTempFileNameA GetShortPathNameA HeapDestroy ExitProcess GetExitCodeProcess FindResourceA LoadResource SizeofResource HeapAlloc HeapFree Sleep LoadLibraryA GetProcAddress FreeLibrary GetCurrentThreadId GetCurrentProcessId CloseHandle InitializeCriticalSection GetModuleFileNameA GetEnvironmentVariableA SetEnvironmentVariableA GetCurrentProcess TerminateProcess RtlLookupFunctionEntry RtlVirtualUnwind RemoveVectoredExceptionHandler AddVectoredExceptionHandler EnterCriticalSection LeaveCriticalSection GetVersionExA HeapReAlloc SetLastError TlsAlloc GetCurrentDirectoryA SetCurrentDirectoryA GetTempPathA SetFileAttributesA DeleteFileA CreateDirectoryA WriteFile CreateFileA SetFilePointer ReadFile DeleteCriticalSection

ole32

CoInitialize CoTaskMemFree RevokeDragDrop

shell32

ShellExecuteExA

winmm

timeBeginPeriod

shlwapi

PathRemoveArgsA PathGetArgsA PathAddBackslashA PathQuoteSpacesA PathUnquoteSpacesA

user32

CharLowerA MessageBoxA SendMessageA PostMessageA GetWindowThreadProcessId IsWindowVisible GetWindowLongPtrA GetForegroundWindow IsWindowEnabled EnableWindow EnumWindows SetWindowPos DestroyWindow GetDC GetWindowTextLengthA GetWindowTextA SetRect DrawTextA GetWindowLongA GetSystemMetrics ReleaseDC GetSysColor GetSysColorBrush CreateWindowExA CallWindowProcA SetWindowLongPtrA SetFocus RedrawWindow RemovePropA DefWindowProcA SetPropA GetPropA GetParent GetWindow SetActiveWindow UnregisterClassA DestroyAcceleratorTable LoadIconA LoadCursorA RegisterClassA AdjustWindowRectEx ShowWindow CreateAcceleratorTableA PeekMessageA MsgWaitForMultipleObjects GetMessageA GetActiveWindow TranslateAcceleratorA TranslateMessage DispatchMessageA EnumChildWindows GetClientRect FillRect GetFocus DefFrameProcA GetWindowRect IsChild GetClassNameA GetKeyState DestroyIcon RegisterWindowMessageA

gdi32

GetStockObject SelectObject SetTextColor SetBkColor GetTextExtentPoint32A CreateSolidBrush DeleteObject GetObjectA CreateCompatibleDC GetDIBits DeleteDC GetObjectType CreateDIBSection BitBlt CreateBitmap SetPixel

comctl32

InitCommonControlsEx

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-07_81c32a73dfac3ae13c70f0f60e848cd8_glassworm_icedid_luca-stealer_njrat

msvcrt

kernel32

ole32

shell32

winmm

shlwapi

user32

gdi32

comctl32

generic

testers-app.pyc