2026-08-17_e248ddc729edc716fbfa6d4ccca7ba3c_glassworm_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-17_e248ddc729edc716fbfa6d4ccca7ba3c_glassworm_icedid_luca-stealer_njrat_stealc
Size 2.2MB
Sample260817-3s5hcssapf
SHA256 467e364589b46144a5807d7a1004f08b51699723153f06472d96578a162329be
MD5 e248ddc729edc716fbfa6d4ccca7ba3c
SHA1 61a98de0c8ae141bbc2b867aed7a9923b32071e2
SHA512 8d537792d7a5b1a8bb3e020dc76e716909c6329d8bfcd1535cf74a8671a6ff8c869413d3c33970b1dcc41533df7588b57cf58fa4af4e2c373a663315fec93699
SSDEEP 49152:eObMe++sYcjq+NMujpVdmmOCgmrzsEPjq7nJOEnjjk7mL2:4OujpVdXOCgmrAEPjU2
TLSH
T131B5AE47A3A442F9C1A7C138CA52971BF7B17849172097DF27E48AA62F13AE01F7E354
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-17_e248ddc729edc716fbfa6d4ccca7ba3c_glassworm_icedid_luca-stealer_njrat_stealc

File Explorer

2026-08-17_e248ddc729edc716fbfa6d4ccca7ba3c_glassworm_icedid_luca-stealer_njrat_stealc

.exe 2.2MB

2026-08-17_e248ddc729edc716fbfa6d4ccca7ba3c_glassworm_icedid_luca-stealer_njrat_stealc

IMPHASH 95d02c26badaed72c86725cc5723638d
SHA256 467e364589b46144a5807d7a1004f08b51699723153f06472d96578a162329be
MD5 e248ddc729edc716fbfa6d4ccca7ba3c
SHA1 61a98de0c8ae141bbc2b867aed7a9923b32071e2
SHA512 8d537792d7a5b1a8bb3e020dc76e716909c6329d8bfcd1535cf74a8671a6ff8c869413d3c33970b1dcc41533df7588b57cf58fa4af4e2c373a663315fec93699
SSDEEP 49152:eObMe++sYcjq+NMujpVdmmOCgmrzsEPjq7nJOEnjjk7mL2:4OujpVdXOCgmrAEPjU2
TLSH
T131B5AE47A3A442F9C1A7C138CA52971BF7B17849172097DF27E48AA62F13AE01F7E354
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

818148

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\lad98\Downloads\VERTEX (1) (2)\Vortyx.pdb

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_43

D3DCompile

advapi32

CryptEncrypt CryptDestroyKey CryptDestroyHash CryptHashData RegOpenKeyExA GetUserNameA RegQueryValueExA RegCloseKey GetTokenInformation OpenProcessToken RegDeleteTreeW CryptCreateHash CryptGetHashParam CryptReleaseContext CryptAcquireContextA CryptImportKey

kernel32

CreateEventA GetSystemDirectoryA Sleep GetLastError SetLastError FormatMessageW MoveFileExA WaitForSingleObjectEx GetEnvironmentVariableA GetStdHandle GetFileType ReadFile PeekNamedPipe WaitForMultipleObjects GetCurrentProcessId SleepEx VerifyVersionInfoW CreateFileA GetFileSizeEx ExitThread CreateThread LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount RtlUnwind RaiseException RtlPcToFileHeader WaitForSingleObject InitializeSListHead GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCPInfo GetStringTypeW SleepConditionVariableSRW WakeAllConditionVariable LCMapStringEx DecodePointer EncodePointer GlobalLock SetEvent DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection Process32NextW EnterCriticalSection GetTickCount AcquireSRWLockExclusive ReleaseSRWLockExclusive GetModuleHandleW DeleteFileW GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW CloseHandle GetModuleFileNameW RtlUnwindEx Process32FirstW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage GetTimeZoneInformation SetEndOfFile SetStdHandle HeapReAlloc FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW VirtualProtect FlsFree FlsSetValue FlsGetValue FlsAlloc HeapFree HeapAlloc GetConsoleOutputCP ReadConsoleW GetConsoleMode WriteFile ExitProcess SetFilePointerEx FileTimeToSystemTime SystemTimeToTzSpecificLocalTime GetDriveTypeW GetFileInformationByHandleEx SetFileInformationByHandle GetFullPathNameW GetFileInformationByHandle GetFileAttributesExW GetModuleHandleExW CreateToolhelp32Snapshot OpenProcess GetEnvironmentVariableW TerminateProcess GetCurrentProcess GetComputerNameA GetDiskFreeSpaceExA GlobalMemoryStatusEx LoadLibraryW GetVersionExW QueryPerformanceCounter FreeLibrary VerSetConditionMask GetProcAddress QueryPerformanceFrequency LoadLibraryA GetModuleHandleA GlobalFree GlobalAlloc MultiByteToWideChar GlobalUnlock GetSystemTimeAsFileTime WideCharToMultiByte HeapSize WriteConsoleW FormatMessageA TryAcquireSRWLockExclusive GetCurrentThreadId LocalFree GetLocaleInfoEx GetCurrentDirectoryW CreateFileW FindClose FindFirstFileW FindFirstFileExW FindNextFileW FreeLibraryAndExitThread

user32

GetCursorPos SetCursorPos ReleaseCapture CloseClipboard GetClientRect SetCursor SetCapture LoadCursorW GetForegroundWindow EmptyClipboard GetClipboardData SetClipboardData OpenClipboard IsWindowUnicode TrackMouseEvent GetWindowLongW DefWindowProcW DestroyWindow CreateWindowExW UnregisterClassW RegisterClassExW ShowWindow DispatchMessageW SetWindowLongA PeekMessageW SetLayeredWindowAttributes TranslateMessage PostQuitMessage UpdateWindow GetWindowRect GetSystemMetrics MoveWindow GetKeyState ScreenToClient GetCapture ClientToScreen

shell32

SHEmptyRecycleBinW

imm32

ImmSetCandidateWindow ImmSetCompositionWindow ImmReleaseContext ImmGetContext

dwmapi

DwmExtendFrameIntoClientArea

iphlpapi

GetAdaptersInfo

dnsapi

DnsFlushResolverCache

bcrypt

BCryptGenRandom

normaliz

IdnToUnicode IdnToAscii

ws2_32

getsockopt gethostname ioctlsocket getpeername sendto recvfrom freeaddrinfo getaddrinfo recv listen htonl getsockname connect bind accept select __WSAFDIsSet socket htons WSAIoctl setsockopt WSACleanup WSAStartup ntohs WSAGetLastError WSASetLastError closesocket WSAWaitForMultipleEvents WSAResetEvent WSAEventSelect WSAEnumNetworkEvents WSACreateEvent WSACloseEvent send

wldap32

ord143 ord217 ord46 ord211 ord60 ord45 ord50 ord41 ord22 ord26 ord27 ord32 ord33 ord35 ord79 ord30 ord200 ord301

crypt32

CertFindExtension CertCloseStore CertFreeCertificateChain CertGetCertificateChain CertFreeCertificateChainEngine CertCreateCertificateChainEngine CryptQueryObject CertGetNameStringA CertOpenStore CertAddCertificateContextToStore CryptDecodeObjectEx PFXImportCertStore CryptStringToBinaryA CertFreeCertificateContext CertFindCertificateInStore CertEnumCertificatesInStore

Name

.text

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

400KB

Virtual Size

400KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

354KB

Virtual Size

364KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

66KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-17_e248ddc729edc716fbfa6d4ccca7ba3c_glassworm_icedid_luca-stealer_njrat_stealc

d3d11

d3dcompiler_43

advapi32

kernel32

user32

shell32

imm32

dwmapi

iphlpapi

dnsapi

bcrypt

normaliz

ws2_32

wldap32

crypt32

generic