General
- Target 2026-09-28_56cd0ffd403eb8585ce1d67cb692d270_glassworm_icedid_luca-stealer_njrat_quasar-rat_stealc
- Size 10.5MB
- Sample260928-s5dkasysft
- SHA256 7d1989b596a01963a4c7eacc0459933542716898eaf16529d435081c074ae937
- MD5 56cd0ffd403eb8585ce1d67cb692d270
- SHA1 f926461ecbd1500600bfc4049551b9db27883ad0
- SHA512 f1ac35ccf0eec3e622dcc8249980196499f2e80d4ac7f5461142db76c6519f14cdd39e3023e3c068190767a831bf2725c67c9002d46bb14f6b9be89609ccf86c
- SSDEEP 98304:rX4mpar9kZjnjNoSLpfGzovoimpXLSEP8Yfj07G5hS7HG/ShGl0TJo0A80Kd4+Vp:r1parSRmIyfj0iYu0g6R7fR6e
- TLSH T187B67C27E6B540B9D4AFC1718787A332BA30B8481234B69F1954C7A13F26EA067FF754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-28_56cd0ffd403eb8585ce1d67cb692d270_glassworm_icedid_luca-stealer_njrat_quasar-rat_stealc.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-28_56cd0ffd403eb8585ce1d67cb692d270_glassworm_icedid_luca-stealer_njrat_quasar-rat_stealc.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-28_56cd0ffd403eb8585ce1d67cb692d270_glassworm_icedid_luca-stealer_njrat_quasar-rat_stealc
- Size 10.5MB
- SHA256 7d1989b596a01963a4c7eacc0459933542716898eaf16529d435081c074ae937
- MD5 56cd0ffd403eb8585ce1d67cb692d270
- SHA1 f926461ecbd1500600bfc4049551b9db27883ad0
- SHA512 f1ac35ccf0eec3e622dcc8249980196499f2e80d4ac7f5461142db76c6519f14cdd39e3023e3c068190767a831bf2725c67c9002d46bb14f6b9be89609ccf86c
- SSDEEP 98304:rX4mpar9kZjnjNoSLpfGzovoimpXLSEP8Yfj07G5hS7HG/ShGl0TJo0A80Kd4+Vp:r1parSRmIyfj0iYu0g6R7fR6e
- TLSH T187B67C27E6B540B9D4AFC1718787A332BA30B8481234B69F1954C7A13F26EA067FF754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VMWare services registry key.
-
Loads dropped DLL