General
- Target 2026-08-16_b47d9ec8ddae44a4a1c08b259de4b972_elex_glassworm_icedid_luca-stealer_njrat_swisyn
- Size 10.3MB
- Sample260817-att4sszzdz
- SHA256 4950836c8ecb3eccbd09e8640e793196cd66d464eca6413da3d84d76cc9fd787
- MD5 b47d9ec8ddae44a4a1c08b259de4b972
- SHA1 907443d0031bebde541af87fb265f57aef4e69da
- SHA512 0bbcfc06657053b1fd1b23a1e6bc27acd5b9eabc3d06769cd8e00dfb6a0973d9c91aefc01326c32e1013fc8d6d65341585eaf659e06c0db7aa2f1cdc154515c1
- SSDEEP 196608:V78M0W8UAr/XMCHGLLc54i1wN+VrRRu7NtbFRKnZMQ4Jkz9RwprQqaW5DbhmhPSp:daW8bXMCHWUjtrRQ7XbFsn6QLwzr5nEK
- TLSH T11DB63345776004B9E466927998E0992BE6A53C790BB4CEC7A7F85F210D730DAFE70323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_b47d9ec8ddae44a4a1c08b259de4b972_elex_glassworm_icedid_luca-stealer_njrat_swisyn.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_b47d9ec8ddae44a4a1c08b259de4b972_elex_glassworm_icedid_luca-stealer_njrat_swisyn.exe
Resource
win11ltsc2024-20260710-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_b47d9ec8ddae44a4a1c08b259de4b972_elex_glassworm_icedid_luca-stealer_njrat_swisyn
- Size 10.3MB
- SHA256 4950836c8ecb3eccbd09e8640e793196cd66d464eca6413da3d84d76cc9fd787
- MD5 b47d9ec8ddae44a4a1c08b259de4b972
- SHA1 907443d0031bebde541af87fb265f57aef4e69da
- SHA512 0bbcfc06657053b1fd1b23a1e6bc27acd5b9eabc3d06769cd8e00dfb6a0973d9c91aefc01326c32e1013fc8d6d65341585eaf659e06c0db7aa2f1cdc154515c1
- SSDEEP 196608:V78M0W8UAr/XMCHGLLc54i1wN+VrRRu7NtbFRKnZMQ4Jkz9RwprQqaW5DbhmhPSp:daW8bXMCHWUjtrRQ7XbFsn6QLwzr5nEK
- TLSH T11DB63345776004B9E466927998E0992BE6A53C790BB4CEC7A7F85F210D730DAFE70323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory