General
- Target 2026-09-27_9a721b137a2e5eff951acbf793f886d7_glassworm_icedid_luca-stealer_njrat
- Size 1.1MB
- Sample260928-cyx3cssv4p
- SHA256 2dc740d14386979a8bae0d630cabbb1de4f82b5dbc664b219c1c269f835b8437
- MD5 9a721b137a2e5eff951acbf793f886d7
- SHA1 54595377e2d48f1c2f3c1334b4057700f0bf2b02
- SHA512 648bfca51bd808dc32ca5c52bdbf80dc508fc3959ed22c80c4630746d99c35fcc2e91e978d612a0de2c2763bd2343e6951e6b6e1dab972f88b76843b85afaf6c
- SSDEEP 24576:p7Pm3CmeQHlI4ZnjoiFNoAZDqtI5iq/FxznI43YMJH5n/kyTN+pDYJ8YiO:EC9QHl5oiFNo0DqtI5iqtxzIeJlkpL
- TLSH T11C459E61778980F8C86BD179C61B5217E67170551330AAF7DEF09E652F23AF0A63EB02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-27_9a721b137a2e5eff951acbf793f886d7_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-27_9a721b137a2e5eff951acbf793f886d7_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-27_9a721b137a2e5eff951acbf793f886d7_glassworm_icedid_luca-stealer_njrat
- Size 1.1MB
- SHA256 2dc740d14386979a8bae0d630cabbb1de4f82b5dbc664b219c1c269f835b8437
- MD5 9a721b137a2e5eff951acbf793f886d7
- SHA1 54595377e2d48f1c2f3c1334b4057700f0bf2b02
- SHA512 648bfca51bd808dc32ca5c52bdbf80dc508fc3959ed22c80c4630746d99c35fcc2e91e978d612a0de2c2763bd2343e6951e6b6e1dab972f88b76843b85afaf6c
- SSDEEP 24576:p7Pm3CmeQHlI4ZnjoiFNoAZDqtI5iq/FxznI43YMJH5n/kyTN+pDYJ8YiO:EC9QHl5oiFNo0DqtI5iqtxzIeJlkpL
- TLSH T11C459E61778980F8C86BD179C61B5217E67170551330AAF7DEF09E652F23AF0A63EB02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.