General
- Target 2026-09-30_2f268e410983699acce9e9cb18e68c47_glassworm_icedid_luca-stealer_njrat
- Size 4.5MB
- Sample260930-ps72lavy2q
- SHA256 b627b80bbf1f09e3c63ca840c6a998aad04dc3659bb2dc9de80492c2dfe98426
- MD5 2f268e410983699acce9e9cb18e68c47
- SHA1 c54117a7bf7dbd3e6bd93ad8766e9755eb6ea577
- SHA512 2f37de34c8b91e7c89c9c44b47931b0b93e705afef5cec04dcea1e0814ac40d325898bfc178eee17260f35b73b3c54bc031a821ece96435ca0be675ea691f96b
- SSDEEP 49152:iGQXCV4YakpAPRgsgSDIMrbUMXt4H4cDaqRuEX/B5hEGvPuhxSMmT8oWgBCaXwaa:czx95QDLuEvBm+M4FHXwJT6+M4FHX
- TLSH T1C626C01EAE9802ECD0B7C178C9565903EBB27C0543605ADF0EA46976DF7BAE05A3F701
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 2026-09-30_2f268e410983699acce9e9cb18e68c47_glassworm_icedid_luca-stealer_njrat
- Size 4.5MB
- SHA256 b627b80bbf1f09e3c63ca840c6a998aad04dc3659bb2dc9de80492c2dfe98426
- MD5 2f268e410983699acce9e9cb18e68c47
- SHA1 c54117a7bf7dbd3e6bd93ad8766e9755eb6ea577
- SHA512 2f37de34c8b91e7c89c9c44b47931b0b93e705afef5cec04dcea1e0814ac40d325898bfc178eee17260f35b73b3c54bc031a821ece96435ca0be675ea691f96b
- SSDEEP 49152:iGQXCV4YakpAPRgsgSDIMrbUMXt4H4cDaqRuEX/B5hEGvPuhxSMmT8oWgBCaXwaa:czx95QDLuEvBm+M4FHXwJT6+M4FHX
- TLSH T1C626C01EAE9802ECD0B7C178C9565903EBB27C0543605ADF0EA46976DF7BAE05A3F701
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1