General
- Target 2026-08-18_380b211bc6398bcd4042db14a4fc2c4e_glassworm_icedid_luca-stealer_njrat_stealc
- Size 2.3MB
- Sample260818-cvvg3athpd
- SHA256 c07389ad2d725fe782ecb93834a29694e5ec7aad29772ba2edf37a739b1edc92
- MD5 380b211bc6398bcd4042db14a4fc2c4e
- SHA1 93a597556175af92217f938a0e53e8a45a77ed71
- SHA512 713c6abc11ba3ac8674d2692de8586170e5508cd30cd2fbaa17cb4081e96ccebdf20bcd3edab69551e97e4493c538049ee7655311f46f4ae4241b8c17ce32185
- SSDEEP 24576:btnOrYN933Qy7ajl0ZP4g4tmmc1gsOYUWPqVRG4WgFDi7N3tK+Fm0W/:bVOr633HajS9ac1nlUWPug4WCDi754
- TLSH T1F3B59E5393EC41E5E07A8734C95A8626FEF17C190B70A6DF0245FA1E2F336C2567A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-18_380b211bc6398bcd4042db14a4fc2c4e_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-08-18_380b211bc6398bcd4042db14a4fc2c4e_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target 2026-08-18_380b211bc6398bcd4042db14a4fc2c4e_glassworm_icedid_luca-stealer_njrat_stealc
- Size 2.3MB
- SHA256 c07389ad2d725fe782ecb93834a29694e5ec7aad29772ba2edf37a739b1edc92
- MD5 380b211bc6398bcd4042db14a4fc2c4e
- SHA1 93a597556175af92217f938a0e53e8a45a77ed71
- SHA512 713c6abc11ba3ac8674d2692de8586170e5508cd30cd2fbaa17cb4081e96ccebdf20bcd3edab69551e97e4493c538049ee7655311f46f4ae4241b8c17ce32185
- SSDEEP 24576:btnOrYN933Qy7ajl0ZP4g4tmmc1gsOYUWPqVRG4WgFDi7N3tK+Fm0W/:bVOr633HajS9ac1nlUWPug4WCDi754
- TLSH T1F3B59E5393EC41E5E07A8734C95A8626FEF17C190B70A6DF0245FA1E2F336C2567A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Defense Evasion
Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1