General
- Target 2026-08-16_29a57e6faf99d942410bc2e21e34eb29_amadey_elex_glassworm_icedid_luca-stealer_njrat_stealc
- Size 4.4MB
- Sample260816-sdj8rsdl5s
- SHA256 6a26da49b2de1c70705918f8805192f7dfe43234c59a06a55145b35d46a8e660
- MD5 29a57e6faf99d942410bc2e21e34eb29
- SHA1 8afd837df53f23b35a393de3dc10a2d5755cf2b9
- SHA512 a22f45f1aa5f4a8f540139269a8fdcf82c826196d292e2e82dd9ddd7245a3908fa9e982b1ec01f5437f0ae62d2a78adadddfa3c6e45693c6819db2d607a6d538
- SSDEEP 49152:f1Olytr15lJ0KS/IHHlAbJ7VOr633HajS9ac1nlUWPug4WCDi75U4m7l5An:fgar15/0KS/IHHqhl9hT4VOlUU
- TLSH T197269E51A3E880A1F07716B0587D8336EEB6BC354B7195CF5384FA1E2B32AC19A75723
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-16_29a57e6faf99d942410bc2e21e34eb29_amadey_elex_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-08-16_29a57e6faf99d942410bc2e21e34eb29_amadey_elex_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260710-en
Malware Config
Targets
-
- Target 2026-08-16_29a57e6faf99d942410bc2e21e34eb29_amadey_elex_glassworm_icedid_luca-stealer_njrat_stealc
- Size 4.4MB
- SHA256 6a26da49b2de1c70705918f8805192f7dfe43234c59a06a55145b35d46a8e660
- MD5 29a57e6faf99d942410bc2e21e34eb29
- SHA1 8afd837df53f23b35a393de3dc10a2d5755cf2b9
- SHA512 a22f45f1aa5f4a8f540139269a8fdcf82c826196d292e2e82dd9ddd7245a3908fa9e982b1ec01f5437f0ae62d2a78adadddfa3c6e45693c6819db2d607a6d538
- SSDEEP 49152:f1Olytr15lJ0KS/IHHlAbJ7VOr633HajS9ac1nlUWPug4WCDi75U4m7l5An:fgar15/0KS/IHHqhl9hT4VOlUU
- TLSH T197269E51A3E880A1F07716B0587D8336EEB6BC354B7195CF5384FA1E2B32AC19A75723
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Defense Evasion
Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1