Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/09/2026, 22:45
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe
- Size 16.0MB
- Sample260930-2pkhcatgle
- SHA256 bd0b1cbee8e871b86470bae9bce0722a30f6a84bd6aacffa697bcd3edb3832ab
- MD5 2b111d61756e51b03f50652b5e14842a
- SHA1 aa8c71e0d2752979ae542e6d20f756e92e9cd0dc
- SHA512 b925362e7741e13bc70a5da9a303fcf4e607397c9ef65e6b7605fb345648564018f4f423a18306f532b58a043e5d220946029849aefe92f115ae4682148fa0d6
- SSDEEP 196608:2qLJ8XoP7Q3q4FXcxwOxKIPFWmBrW6MozSiflld:B98XSAq2XcxBPwm1NSYD
- TLSH T19BF68E66F57D01ECD1B9D0798A2BB403F5B03496073912E721A65E8A5F6BEE09E3F310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe - Suspicious use of SendNotifyMessage 64 IoCs
pid Process 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe 2888 2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_2b111d61756e51b03f50652b5e14842a_glassworm_icedid_luca-stealer_njrat_stealc.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:2888
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\CadThumb\settings.ini
- Size 3KB
- SHA256 2768c178f74fa8adc8e1a71df6548a5fbe7de6d5087ce0d192e948c1219f2224
- MD5 1625faefd330580016c9e27762c4fb18
- SHA1 25f12f0f5d65ad1dbe1a59f59dfc22897076377d
- SHA512 270bf5ebb861d7baf1e6b84b59e30f7329663e72ad0742399fe94984f44ad540716c59c22ddb67cd649cbc702022d0f84861f283de4550c87fd355edf41ecfca
- TLSH T1AB61530FFBF8521175A2D2449FB248EB2296B710272CD4C9D6CF1C9628E8630B3267D3
- MD5 SHA1 SHA512 TLSH