General
- Target 2026-08-20_2d1e3a3d493696971af4c0235e805194_elex_glassworm_icedid_luca-stealer_njrat_swisyn
- Size 26.4MB
- Sample260820-gtpbwattfw
- SHA256 c9a5812e48d413e08b2f3186715922464784e15390d1c3f5b0ad87d660d9ab6d
- MD5 2d1e3a3d493696971af4c0235e805194
- SHA1 0d5e7870b68c38ddbb4cf83d0e7bfeac19338041
- SHA512 5a384de03ce7054fb5e16c964994b1d2e5b7426c3933f4b2c6805f46cbb45037d484efa6d71d7e776ab7db19c80a64622fa539f4e13a27d1758d68e8b735058b
- SSDEEP 786432:ngX69c4aS+wCMw1s42Psn1gtAixptxPyr4LexmBZrsceZCN:ngXdTSThw1p2PsnutlxbxPyULexmjsv6
- TLSH T165573365E64005D7D6DA84784532DA25B1B1BAEB1FF08D6B4370B2512C332C66EBF23E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_2d1e3a3d493696971af4c0235e805194_elex_glassworm_icedid_luca-stealer_njrat_swisyn.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_2d1e3a3d493696971af4c0235e805194_elex_glassworm_icedid_luca-stealer_njrat_swisyn.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_2d1e3a3d493696971af4c0235e805194_elex_glassworm_icedid_luca-stealer_njrat_swisyn
- Size 26.4MB
- SHA256 c9a5812e48d413e08b2f3186715922464784e15390d1c3f5b0ad87d660d9ab6d
- MD5 2d1e3a3d493696971af4c0235e805194
- SHA1 0d5e7870b68c38ddbb4cf83d0e7bfeac19338041
- SHA512 5a384de03ce7054fb5e16c964994b1d2e5b7426c3933f4b2c6805f46cbb45037d484efa6d71d7e776ab7db19c80a64622fa539f4e13a27d1758d68e8b735058b
- SSDEEP 786432:ngX69c4aS+wCMw1s42Psn1gtAixptxPyr4LexmBZrsceZCN:ngXdTSThw1p2PsnutlxbxPyULexmjsv6
- TLSH T165573365E64005D7D6DA84784532DA25B1B1BAEB1FF08D6B4370B2512C332C66EBF23E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2