General
- Target 2026-09-10_c126a61fd30ec2529ad5149c22865863_glassworm_icedid_luca-stealer_njrat_stealc
- Size 1.3MB
- Sample260910-m8ad6asbqb
- SHA256 0df6efe0a2550e4613159c4c8acd1ab0c1cf1519b073498d725c9d9ce4927561
- MD5 c126a61fd30ec2529ad5149c22865863
- SHA1 60b7cc1e9d419094501f06c2a5f07c244572b755
- SHA512 dadedd03a925e672916f5239b4991a665a70ed7f7354c47ce24aab09842e260016f65a3eb405de32d66eb54530ab5e4bbc8d6831c73f6662d12b2f333b9fc767
- SSDEEP 24576:MAsrRvMwpersbbuIet+p7MCb+BNUzgt80P4O7LMmmK:MAwersbbNetg7Ms+BNNt2O3K
- TLSH T16B558C1DE3A402F8E0BFC6B5CE624503DBB378490631D6AF06D559961F277709E3AB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-09-10_c126a61fd30ec2529ad5149c22865863_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_c126a61fd30ec2529ad5149c22865863_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_c126a61fd30ec2529ad5149c22865863_glassworm_icedid_luca-stealer_njrat_stealc
- Size 1.3MB
- SHA256 0df6efe0a2550e4613159c4c8acd1ab0c1cf1519b073498d725c9d9ce4927561
- MD5 c126a61fd30ec2529ad5149c22865863
- SHA1 60b7cc1e9d419094501f06c2a5f07c244572b755
- SHA512 dadedd03a925e672916f5239b4991a665a70ed7f7354c47ce24aab09842e260016f65a3eb405de32d66eb54530ab5e4bbc8d6831c73f6662d12b2f333b9fc767
- SSDEEP 24576:MAsrRvMwpersbbuIet+p7MCb+BNUzgt80P4O7LMmmK:MAwersbbNetg7Ms+BNNt2O3K
- TLSH T16B558C1DE3A402F8E0BFC6B5CE624503DBB378490631D6AF06D559961F277709E3AB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows exceutables bypassing UAC using CMSTP COM interfaces. MITRE (T1218.003)
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Detects executables using Telegram Chat Bot