General
- Target 2026-08-25_8a995e7f6217f918642ec4c6b8729b32_glassworm_icedid_luca-stealer_njrat_vidar
- Size 20.4MB
- Sample260826-wvlpps1vb1
- SHA256 8df04c5226e6b33e589159478abbebd10dddedfbdd605097512f8a7d62fe5227
- MD5 8a995e7f6217f918642ec4c6b8729b32
- SHA1 f3982658f1ba75b2b62624565b7b8233beb1feac
- SHA512 517164b2d5d3321fb17412db83a141bc23952794ee435793b7bf37ecd4cf56a83e0bee68f42f7a41f8739213969f55716e167a2647f02db98ca0cae4460c9d34
- SSDEEP 196608:GPhxYgPes/K8FJ68iEvLsjjttuT6Lt7SIFTzS1znQ4:GxYgV/dw8i7Q6Lt7SAnS1znQ4
- TLSH T1822708D4F1262AA4E437FD35641E7575839A6800EB38E0F788FEEE212674EF40935366
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-25_8a995e7f6217f918642ec4c6b8729b32_glassworm_icedid_luca-stealer_njrat_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_8a995e7f6217f918642ec4c6b8729b32_glassworm_icedid_luca-stealer_njrat_vidar.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_8a995e7f6217f918642ec4c6b8729b32_glassworm_icedid_luca-stealer_njrat_vidar
- Size 20.4MB
- SHA256 8df04c5226e6b33e589159478abbebd10dddedfbdd605097512f8a7d62fe5227
- MD5 8a995e7f6217f918642ec4c6b8729b32
- SHA1 f3982658f1ba75b2b62624565b7b8233beb1feac
- SHA512 517164b2d5d3321fb17412db83a141bc23952794ee435793b7bf37ecd4cf56a83e0bee68f42f7a41f8739213969f55716e167a2647f02db98ca0cae4460c9d34
- SSDEEP 196608:GPhxYgPes/K8FJ68iEvLsjjttuT6Lt7SIFTzS1znQ4:GxYgV/dw8i7Q6Lt7SAnS1znQ4
- TLSH T1822708D4F1262AA4E437FD35641E7575839A6800EB38E0F788FEEE212674EF40935366
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE