Overview

overview

10

Static

static

10

2026-10-02...lc.exe

windows10-2004-x64

6

2026-10-02...lc.exe

windows11-ltsc_2024-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-10-02_e825f74ba7a5b332ca4622b7bffbb9b6_glassworm_icedid_mespinoza_njrat_ryuk_stealc
  • Size 18.7MB
  • Sample261002-3leclaab23
  • SHA256 dce5c60d3863865c13f62eb27f92eb152dd47ee24d7150e3a6469fbbce517b1d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 2026-10-02_e825f74ba7a5b332ca4622b7bffbb9b6_glassworm_icedid_mespinoza_njrat_ryuk_stealc
    .exe 18.7MB

2026-10-02_e825f74ba7a5b332ca4622b7bffbb9b6_glassworm_icedid_mespinoza_njrat_ryuk_stealc

  • IMPHASH 8b734a40acaa0903da007382e88cfd80
  • SHA256 dce5c60d3863865c13f62eb27f92eb152dd47ee24d7150e3a6469fbbce517b1d
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:6windowsx64arch:x64

  • Detects executables containing URLs to raw contents of a Github gist

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
86:9d:3b:96:1b:dd:68:8a:5f:90:41:84:5d:7e:d2:48:92:61:78:df:71:24:fd:af:2d:55:87:15:09:00:60:0b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=hex,L=St. Petersburg,C=RU,1.2.840.113549.1.9.1=#0c1337782e6865782e783740676d61696c2e636f6d

PE Signature issue

Digest
c9:9e:85:f8:3d:d4:0b:27:b4:f8:e8:5a:36:06:c1:fc:ab:91:f4:ef
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=hex,L=St. Petersburg,C=RU,1.2.840.113549.1.9.1=#0c1337782e6865782e783740676d61696c2e636f6d
Minor OS version
0
Major OS version
6
Entry point
12882912
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths