General
- Target 2026-08-21_a15b6a9733a82dc29302427e08778c53_glassworm_icedid_luca-stealer_njrat_stealc
- Size 13.8MB
- Sample260822-k3dtaasgrb
- SHA256 5235533c9fe95ffc4e0da3d7d48666a209e8f27ef7c3ac51a456769e6ed1da9e
- MD5 a15b6a9733a82dc29302427e08778c53
- SHA1 66920f2c0dff6b5bf124dda1e1d162a9346b8c64
- SHA512 fd5dcc0715cfdb3996eb76cbbe26e02f7a68fbee314481174c57ef80572fdda57c92121af3cc7399761efbbfe94e6b086516d2a80aa1102393171f6fa7be2c85
- SSDEEP 49152:BfiTXKfFzhj6oi3aRwdAjNQOcUZhhpCVjiV8db1JVd1S3231Fc5juO+eF7mYqqAa:N40HuAfLjCVjYmj6eezqqkUPM0PF
- TLSH T17FE69D5AF3A401E8C0A7D07D89165117F67238461334EAEB53E089A62F77BE06B7E731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-21_a15b6a9733a82dc29302427e08778c53_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_a15b6a9733a82dc29302427e08778c53_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_a15b6a9733a82dc29302427e08778c53_glassworm_icedid_luca-stealer_njrat_stealc
- Size 13.8MB
- SHA256 5235533c9fe95ffc4e0da3d7d48666a209e8f27ef7c3ac51a456769e6ed1da9e
- MD5 a15b6a9733a82dc29302427e08778c53
- SHA1 66920f2c0dff6b5bf124dda1e1d162a9346b8c64
- SHA512 fd5dcc0715cfdb3996eb76cbbe26e02f7a68fbee314481174c57ef80572fdda57c92121af3cc7399761efbbfe94e6b086516d2a80aa1102393171f6fa7be2c85
- SSDEEP 49152:BfiTXKfFzhj6oi3aRwdAjNQOcUZhhpCVjiV8db1JVd1S3231Fc5juO+eF7mYqqAa:N40HuAfLjCVjYmj6eezqqkUPM0PF
- TLSH T17FE69D5AF3A401E8C0A7D07D89165117F67238461334EAEB53E089A62F77BE06B7E731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE