019a741945730635e432dd0efdbc6f910fa642dfd5011a7475233cf4f7704e44 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

2026-09-06..._n.exe

windows10-2004-x64

7

2026-09-06..._n.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-06_695bd2c3de4ce45d010dcdf7d7ca165a_amadey_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
Size 50.7MB
Sample260907-b37a6awfma
SHA256 019a741945730635e432dd0efdbc6f910fa642dfd5011a7475233cf4f7704e44
MD5 695bd2c3de4ce45d010dcdf7d7ca165a
SHA1 2b2794e2550b531ba68fff2dbf63cdd6a2ff2ce4
SHA512 bd1b38faa02b16102e61f30d451ba397208e9ce3ec55f60b12ccee17a69054d6d31470b8fb746e12b2a685bff6f0c656347953037131913fffef979bb62855e4
SSDEEP 196608:5m/mm/mm/mm/mmEFIF0wumm/mm/mm/mm/mmEFIF0wumm/mm/mm/mm/mmEFIF0wub:V666Ap
TLSH
T118C77C09F98244F1D977417049DBD27ACA70BA2186228EEFF74D871B6F23B91AC39711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution persistence spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-09-06_695bd2c3de4ce45d010dcdf7d7ca165a_amadey_elex_glassworm_hijackloader_icedid_luca-stealer_n.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

13 signatures

150 seconds

discovery execution persistence spyware stealer

Behavioral task

behavioral2

Sample

2026-09-06_695bd2c3de4ce45d010dcdf7d7ca165a_amadey_elex_glassworm_hijackloader_icedid_luca-stealer_n.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

discovery execution persistence

Malware Config

Targets

- Target
  2026-09-06_695bd2c3de4ce45d010dcdf7d7ca165a_amadey_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 50.7MB
- SHA256 019a741945730635e432dd0efdbc6f910fa642dfd5011a7475233cf4f7704e44
- MD5 695bd2c3de4ce45d010dcdf7d7ca165a
- SHA1 2b2794e2550b531ba68fff2dbf63cdd6a2ff2ce4
- SHA512 bd1b38faa02b16102e61f30d451ba397208e9ce3ec55f60b12ccee17a69054d6d31470b8fb746e12b2a685bff6f0c656347953037131913fffef979bb62855e4
- SSDEEP 196608:5m/mm/mm/mm/mmEFIF0wumm/mm/mm/mm/mmEFIF0wumm/mm/mm/mm/mmEFIF0wub:V666Ap
- TLSH
  T118C77C09F98244F1D977417049DBD27ACA70BA2186228EEFF74D871B6F23B91AC39711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution persistence spyware stealer
- Creates new service(s)
  persistence execution
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Scheduled Task/Job

Scheduled Task

System Services

Service Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Scheduled Task/Job

Scheduled Task

Defense Evasion

Modify Registry

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecutionpersistencespywarestealer

behavioral2

discoveryexecutionpersistence

© 2018-2026

Terms | Privacy