General
- Target 2026-10-11_4ad97ee29366785c9c6b8a75382488c5_elex_glassworm_icedid_luca-stealer_njrat_stealc_swisyn_wannacry
- Size 9.1MB
- Sample261012-2be1psx12p
- SHA256 fc0d0b8ba9a168c6041ae0b82cc3c2c9a51e476bf38f8ca8675e6615943b0771
- MD5 4ad97ee29366785c9c6b8a75382488c5
- SHA1 3c9f384bcb1ec8f40f86fdbdf8351357bb160bc1
- SHA512 163662c85f794cee52939da44cdcde00b7e0bb8c2e808f256a6027744572e5390a4026da0cac2a7a974e9bd59f9c5934bfa2f215e87ced6afc70078d16cfb0e6
- SSDEEP 196608:zdS5kN5cytwctrPbrg+M60LRC3TSUQe75LSXWhCx7xpElSI6ooOdSYNq/fu/UkEO:zdLNLN73g+M6QRC3TSUQe75LSXWhCx7U
- TLSH T1E1A69D5266ED81AAD217F37A8A42D05BEB313F541321C2EF32C19A6B3B136D7567E301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-11_4ad97ee29366785c9c6b8a75382488c5_elex_glassworm_icedid_luca-stealer_njrat_stealc_swisyn_wannacry.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-11_4ad97ee29366785c9c6b8a75382488c5_elex_glassworm_icedid_luca-stealer_njrat_stealc_swisyn_wannacry.exe
Resource
win11ltsc2024-20260911-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-11_4ad97ee29366785c9c6b8a75382488c5_elex_glassworm_icedid_luca-stealer_njrat_stealc_swisyn_wannacry
- Size 9.1MB
- SHA256 fc0d0b8ba9a168c6041ae0b82cc3c2c9a51e476bf38f8ca8675e6615943b0771
- MD5 4ad97ee29366785c9c6b8a75382488c5
- SHA1 3c9f384bcb1ec8f40f86fdbdf8351357bb160bc1
- SHA512 163662c85f794cee52939da44cdcde00b7e0bb8c2e808f256a6027744572e5390a4026da0cac2a7a974e9bd59f9c5934bfa2f215e87ced6afc70078d16cfb0e6
- SSDEEP 196608:zdS5kN5cytwctrPbrg+M60LRC3TSUQe75LSXWhCx7xpElSI6ooOdSYNq/fu/UkEO:zdLNLN73g+M6QRC3TSUQe75LSXWhCx7U
- TLSH T1E1A69D5266ED81AAD217F37A8A42D05BEB313F541321C2EF32C19A6B3B136D7567E301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2