2026-08-21_35bfc8439f88ca2233aa9f4a76c3346d_glassworm_icedid_luca-stealer_njrat_stealc

General

Target
2026-08-21_35bfc8439f88ca2233aa9f4a76c3346d_glassworm_icedid_luca-stealer_njrat_stealc
Size 1.2MB
Sample260821-cdl5cs1aje
SHA256 8f109f3c2b0bd7becb77f58dc3b90e208bfcdb83cec65286075ff01cf21e37ec
MD5 35bfc8439f88ca2233aa9f4a76c3346d
SHA1 0ccc1f78a53ff77d7695d46cb669391086f41c92
SHA512 33f297264692e0de3723ceada417e7d3fca837c64f5efce539b199556c494e26a6f2f63540be047d1ef8ebc3b8ec5f585e595791f1a599c0ac1ed2d318dc6b1c
SSDEEP 24576:CRIka7Py8epKeHfoyFENH7Eomp+/BkbstNKl5NfI3//V5dK858Rh0lhSMXlr5:CRaW8epKeAtF7SptbstNKl5NfI3hM4
TLSH
T16D45AE56A7B440F9D1ABC179CA52860BEBB27805137097CF07E48AA62F236E15F3F711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-21_35bfc8439f88ca2233aa9f4a76c3346d_glassworm_icedid_luca-stealer_njrat_stealc

File Explorer

2026-08-21_35bfc8439f88ca2233aa9f4a76c3346d_glassworm_icedid_luca-stealer_njrat_stealc

.exe 1.2MB

2026-08-21_35bfc8439f88ca2233aa9f4a76c3346d_glassworm_icedid_luca-stealer_njrat_stealc

IMPHASH 52f534585e847090fc9a894381cc64ea
SHA256 8f109f3c2b0bd7becb77f58dc3b90e208bfcdb83cec65286075ff01cf21e37ec
MD5 35bfc8439f88ca2233aa9f4a76c3346d
SHA1 0ccc1f78a53ff77d7695d46cb669391086f41c92
SHA512 33f297264692e0de3723ceada417e7d3fca837c64f5efce539b199556c494e26a6f2f63540be047d1ef8ebc3b8ec5f585e595791f1a599c0ac1ed2d318dc6b1c
SSDEEP 24576:CRIka7Py8epKeHfoyFENH7Eomp+/BkbstNKl5NfI3//V5dK858Rh0lhSMXlr5:CRaW8epKeAtF7SptbstNKl5NfI3hM4
TLSH
T16D45AE56A7B440F9D1ABC179CA52860BEBB27805137097CF07E48AA62F236E15F3F711
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

7440

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\sergio\Downloads\cs2_webradar_ultimate-main\usermode\Release\usermode.pdb

kernel32

SizeofResource WriteProcessMemory HeapFree TerminateProcess ResumeThread LockResource CloseHandle LoadResource FindResourceW HeapAlloc GetThreadContext VirtualAllocEx ReadProcessMemory GetProcessHeap CreateProcessA SetThreadContext IsWow64Process RtlLookupFunctionEntry RtlVirtualUnwind RtlCaptureContext UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess GetModuleHandleW IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent

vcruntime140

__current_exception __C_specific_handler __current_exception_context memcpy memset

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf __acrt_iob_func __p__commode _set_fmode

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table _register_onexit_function _crt_atexit terminate _c_exit _seh_filter_exe _register_thread_local_exe_atexit_callback __p___argv _cexit __p___argc _exit exit _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv system _set_app_type

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-21_35bfc8439f88ca2233aa9f4a76c3346d_glassworm_icedid_luca-stealer_njrat_stealc

kernel32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic