Analysis
- max time kernel
150s - max time network
144s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/10/2026, 04:36
Behavioral task
behavioral1
Sample
2026-10-01_ba31606de6f6b261303cfb85c7994181_elex_glassworm_icedid_luca-stealer_njrat_vidar.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-01_ba31606de6f6b261303cfb85c7994181_elex_glassworm_icedid_luca-stealer_njrat_vidar.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target 2026-10-01_ba31606de6f6b261303cfb85c7994181_elex_glassworm_icedid_luca-stealer_njrat_vidar.exe
- Size 46.4MB
- Sample261002-e8gjgaysay
- SHA256 9386359ac7ffb0a4916e2dd648d5375719b4a8435bcf24c42702034f6df06fac
- MD5 ba31606de6f6b261303cfb85c7994181
- SHA1 a55188c78c94bc94464aff53c4842be6152d2b0a
- SHA512 d5234915a6a6935b031d2d07b33e00e205d471863bfb368fb5050689849c14f7aea1aeb38d85f7c34b17c28cf71fbb5c342c3f65941bda76a15e9d8b0cdb4861
- SSDEEP 786432:Ii03biGRN1+qbwewbk+u/UEVh0Fk+oqemlUU:Iiutr1czu/Rq
- TLSH T1E9B76B4252A9BCD1D032A230D7BB8FF1C769AC455628D25F2081FA473D3A783792B7E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Malware Config
Signatures
- Detects executables manipulated with Fody 1 IoCs
resource yara_rule behavioral2/memory/1284-2-0x0000022BDAAC0000-0x0000022BDD922000-memory.dmp INDICATOR_EXE_Packed_Fody - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS 2026-10-01_ba31606de6f6b261303cfb85c7994181_elex_glassworm_icedid_luca-stealer_njrat_vidar.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer 2026-10-01_ba31606de6f6b261303cfb85c7994181_elex_glassworm_icedid_luca-stealer_njrat_vidar.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemVersion 2026-10-01_ba31606de6f6b261303cfb85c7994181_elex_glassworm_icedid_luca-stealer_njrat_vidar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-01_ba31606de6f6b261303cfb85c7994181_elex_glassworm_icedid_luca-stealer_njrat_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-01_ba31606de6f6b261303cfb85c7994181_elex_glassworm_icedid_luca-stealer_njrat_vidar.exe"1⤵
- Enumerates system info in registry
PID:1284