2026-10-18_32dcd74d9b0c6f68d94f36217e9be6b9_glassworm_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-18_32dcd74d9b0c6f68d94f36217e9be6b9_glassworm_icedid_luca-stealer_njrat_stealc
Size 8.4MB
Sample261018-tklkvaex2p
SHA256 13625b48521807d05fc2d4cb9e5b7bb6195d2a92032ce0667c44494882ed3587
MD5 32dcd74d9b0c6f68d94f36217e9be6b9
SHA1 39fd3324d0feb081d9ab9d51dcd7c61342805401
SHA512 4cae405a5de64f764f5bdaf18e66339b6af9d06fc6b4737dababaebf449789ff55e95a32ecbf17b9ad18022a89a38ef283ddfb8a60fbf1ee71612473f94c57c3
SSDEEP 196608:UQUclXSABItAxU/gJx5JBKX7EDNwfo5JtOVPlM:dlXSzAxU/gf5JBKXADif8tOdm
TLSH
T12996AE17B2B901D8D1BBC079CA4BA907FB72344907B097DF02A0466A5F67AF05EBE711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-18_32dcd74d9b0c6f68d94f36217e9be6b9_glassworm_icedid_luca-stealer_njrat_stealc

File Explorer

2026-10-18_32dcd74d9b0c6f68d94f36217e9be6b9_glassworm_icedid_luca-stealer_njrat_stealc

.exe 8.4MB

2026-10-18_32dcd74d9b0c6f68d94f36217e9be6b9_glassworm_icedid_luca-stealer_njrat_stealc

IMPHASH 5f9f658d6a0522ad9eacb5e3271b65dc
SHA256 13625b48521807d05fc2d4cb9e5b7bb6195d2a92032ce0667c44494882ed3587
MD5 32dcd74d9b0c6f68d94f36217e9be6b9
SHA1 39fd3324d0feb081d9ab9d51dcd7c61342805401
SHA512 4cae405a5de64f764f5bdaf18e66339b6af9d06fc6b4737dababaebf449789ff55e95a32ecbf17b9ad18022a89a38ef283ddfb8a60fbf1ee71612473f94c57c3
SSDEEP 196608:UQUclXSABItAxU/gJx5JBKX7EDNwfo5JtOVPlM:dlXSzAxU/gf5JBKXADif8tOdm
TLSH
T12996AE17B2B901D8D1BBC079CA4BA907FB72344907B097DF02A0466A5F67AF05EBE711
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6157404

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

CredWriteW CredReadW CredDeleteW CredFree CryptAcquireContextW CryptReleaseContext CryptGetHashParam CryptCreateHash CryptHashData CryptDestroyHash OpenProcessToken AdjustTokenPrivileges GetTokenInformation LookupPrivilegeValueW ConvertStringSecurityDescriptorToSecurityDescriptorW RegCloseKey RegCreateKeyExW RegOpenKeyExW RegQueryValueExW RegSetValueExW RegGetValueW

ws2_32

bind __WSAFDIsSet send htonl closesocket ioctlsocket htons listen recv select setsockopt WSAGetLastError WSACleanup WSAStartup socket accept

bcrypt

BCryptCreateHash BCryptOpenAlgorithmProvider BCryptCloseAlgorithmProvider BCryptHashData BCryptFinishHash BCryptGetProperty BCryptDestroyHash

crypt32

CryptStringToBinaryA CryptBinaryToStringA

dbghelp

SymCleanup SymSetSearchPathW SymLoadModuleExW SymSetOptions UnDecorateSymbolName SymGetModuleInfoW64 SymInitialize SymEnumSymbols SymUnloadModule64 SymGetSymbolFileW MiniDumpWriteDump

dwmapi

DwmExtendFrameIntoClientArea DwmSetWindowAttribute DwmFlush DwmGetWindowAttribute

shell32

Shell_NotifyIconW CommandLineToArgvW ShellExecuteExW DragQueryFileW DragQueryPoint DragFinish DragAcceptFiles ShellExecuteW

winhttp

WinHttpConnect WinHttpReadData WinHttpSetOption WinHttpWebSocketReceive WinHttpWebSocketSend WinHttpWebSocketCompleteUpgrade WinHttpOpen WinHttpAddRequestHeaders WinHttpQueryDataAvailable WinHttpQueryHeaders WinHttpReceiveResponse WinHttpSendRequest WinHttpOpenRequest WinHttpSetTimeouts WinHttpCloseHandle WinHttpSetStatusCallback WinHttpCrackUrl

api-ms-win-core-libraryloader-l1-2-0

LockResource SizeofResource LoadResource GetModuleHandleW GetProcAddress LoadLibraryExA FreeLibraryAndExitThread GetModuleFileNameW GetModuleHandleExW FreeLibrary LoadLibraryExW

api-ms-win-core-libraryloader-l1-2-1

FindResourceW LoadLibraryW LoadLibraryA

api-ms-win-core-com-l1-1-0

CoUninitialize CoTaskMemFree CoCreateInstance CoInitializeEx CoCreateFreeThreadedMarshaler

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter GetLastError SetUnhandledExceptionFilter RaiseException SetLastError

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId SetThreadPriority ExitProcess GetStartupInfoW CreateThread GetCurrentThreadId TlsFree TerminateProcess TlsSetValue TlsGetValue TlsAlloc CreateProcessW ProcessIdToSessionId GetExitCodeThread CreateRemoteThread GetCurrentProcess ExitThread

api-ms-win-core-heap-l2-1-0

GlobalFree GlobalAlloc LocalFree

api-ms-win-core-heap-obsolete-l1-1-0

GlobalUnlock GlobalSize GlobalLock

api-ms-win-core-file-l2-1-0

MoveFileExW GetFileInformationByHandleEx

api-ms-win-ntuser-sysparams-l1-1-0

EnumDisplayMonitors EnumDisplaySettingsExW GetMonitorInfoW GetSystemMetrics SystemParametersInfoW EnumDisplayDevicesW

api-ms-win-core-string-l1-1-0

CompareStringEx CompareStringW WideCharToMultiByte MultiByteToWideChar GetStringTypeW

api-ms-win-core-debug-l1-1-0

OutputDebugStringW OutputDebugStringA IsDebuggerPresent

api-ms-win-core-handle-l1-1-0

CloseHandle DuplicateHandle

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent OpenProcess

api-ms-win-core-sysinfo-l1-1-0

GetSystemTime GetSystemInfo GetTickCount GlobalMemoryStatusEx GetLocalTime GetTickCount64 GetSystemTimeAsFileTime

api-ms-win-core-psapi-l1-1-0

K32GetModuleInformation K32GetModuleFileNameExW QueryFullProcessImageNameW

api-ms-win-core-file-l1-1-0

SetFilePointerEx GetDiskFreeSpaceA GetFileAttributesA GetFileAttributesExW DeleteFileA SetFileInformationByHandle WriteFile GetFileAttributesW GetFullPathNameW UnlockFile CreateFileA LockFileEx GetFileSize UnlockFileEx SetEndOfFile GetDriveTypeW GetFileType GetFullPathNameA SetFilePointer FlushFileBuffers LockFile GetDiskFreeSpaceW DeleteFileW GetFileSizeEx FindNextFileW FindFirstFileW FindClose FindFirstFileExW CreateFileW ReadFile CreateDirectoryW

api-ms-win-core-synch-l1-1-0

CreateMutexW ReleaseSemaphore InitializeCriticalSectionAndSpinCount WaitForSingleObjectEx InitializeCriticalSection CreateEventW TryAcquireSRWLockExclusive AcquireSRWLockExclusive ReleaseSRWLockExclusive OpenEventW WaitForSingleObject CreateEventA SetEvent ResetEvent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TryEnterCriticalSection InitializeCriticalSectionEx

api-ms-win-core-synch-l1-2-0

InitOnceComplete Sleep InitOnceBeginInitialize SleepConditionVariableSRW WakeConditionVariable WakeAllConditionVariable

api-ms-win-core-memory-l1-1-0

VirtualProtect CreateFileMappingW FlushViewOfFile UnmapViewOfFile VirtualFreeEx VirtualAllocEx WriteProcessMemory OpenFileMappingW MapViewOfFile

api-ms-win-core-toolhelp-l1-1-0

CreateToolhelp32Snapshot Process32FirstW Process32NextW

api-ms-win-core-version-l1-1-1

GetFileVersionInfoW

api-ms-win-core-version-l1-1-0

VerQueryValueW

api-ms-win-core-processenvironment-l1-1-0

GetEnvironmentStringsW FreeEnvironmentStringsW GetCurrentDirectoryW GetEnvironmentVariableW GetStdHandle SetStdHandle GetCommandLineW GetCommandLineA SetEnvironmentVariableW

api-ms-win-core-string-obsolete-l1-1-0

lstrcpynW

api-ms-win-core-processthreads-l1-1-2

GetSystemTimes

iphlpapi

GetIfTable FreeMibTable GetIfTable2

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency QueryPerformanceCounter

api-ms-win-core-synch-l1-2-1

CreateSemaphoreW

api-ms-win-mm-time-l1-1-0

timeEndPeriod timeBeginPeriod

api-ms-win-core-kernel32-legacy-l1-1-5

SetThreadExecutionState

api-ms-win-core-sysinfo-l1-2-0

GetNativeSystemInfo VerSetConditionMask

api-ms-win-core-localization-l1-2-0

LCMapStringW GetOEMCP GetACP GetLocaleInfoW IsValidCodePage IsValidLocale GetUserDefaultLCID EnumSystemLocalesW LCMapStringEx GetCPInfo GetLocaleInfoEx FormatMessageA FormatMessageW

api-ms-win-core-kernel32-legacy-l1-1-0

CreateFileMappingA

api-ms-win-core-synch-ansi-l1-1-0

CreateSemaphoreA

api-ms-win-core-timezone-l1-1-0

GetTimeZoneInformation SystemTimeToFileTime

api-ms-win-core-heap-l1-1-0

HeapSize HeapFree HeapDestroy HeapValidate HeapReAlloc HeapAlloc HeapCompact GetProcessHeap HeapCreate

api-ms-win-core-file-l1-2-2

GetTempPathA AreFileApisANSI

api-ms-win-core-file-l1-2-0

GetTempPathW

version

GetFileVersionInfoSizeW

opengl32

wglGetProcAddress wglGetCurrentContext

kernel32

K32EnumProcessModules

user32

RegisterDeviceNotificationW RegisterRawInputDevices GetRawInputData CreateIconIndirect DestroyIcon GetClassLongPtrW SetWindowLongW GetWindowLongW OffsetRect SetRect ClipCursor WindowFromPoint SetCursorPos AdjustWindowRectEx SetWindowTextW MsgWaitForMultipleObjects GetKeyState GetActiveWindow SetFocus IsZoomed BringWindowToTop SetWindowPlacement GetWindowPlacement MoveWindow FlashWindow GetLayeredWindowAttributes WaitMessage SendMessageW GetMessageTime TrackMouseEvent MessageBoxW GetWindowDisplayAffinity UnregisterHotKey RegisterHotKey ChangeWindowMessageFilterEx MonitorFromWindow MonitorFromPoint LoadImageW LoadIconW LoadCursorW CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW SetWindowLongPtrW PtInRect ScreenToClient ClientToScreen GetCursorPos SetCursor ChangeDisplaySettingsExW RemovePropW GetPropW SetPropW UnregisterDeviceNotification EndPaint BeginPaint TrackPopupMenu AppendMenuW DestroyMenu CreatePopupMenu KillTimer SetTimer ReleaseCapture SetCapture GetCapture MapVirtualKeyW ToUnicode GetKeyboardState SetWindowDisplayAffinity SetWindowPos SetLayeredWindowAttributes ShowWindow UnregisterClassW CallWindowProcW PostThreadMessageW PostMessageW GetMessageW RegisterWindowMessageW GetClassNameW EnumWindows GetShellWindow FindWindowExW GetWindowLongPtrW EqualRect IntersectRect GetWindowRect PrintWindow IsHungAppWindow GetWindowThreadProcessId ReleaseDC GetDC GetForegroundWindow SendInput GetAsyncKeyState RemoveClipboardFormatListener AddClipboardFormatListener IsClipboardFormatAvailable EmptyClipboard RegisterClipboardFormatW GetClipboardData SetClipboardData GetClipboardSequenceNumber CloseClipboard OpenClipboard IsIconic IsWindowVisible DestroyWindow IsWindow CreateWindowExW RegisterClassExW DefWindowProcW PeekMessageW DispatchMessageW TranslateMessage EnumDisplaySettingsW GetRawInputDeviceInfoA SetWindowRgn GetRawInputDeviceList GetClientRect SetForegroundWindow

gdi32

SetPixelFormat ChoosePixelFormat SetDeviceGammaRamp GetDeviceGammaRamp GetDeviceCaps CreateDCW CreateBitmap OffsetRgn CreateRoundRectRgn CreateEllipticRgn GdiFlush SetViewportOrgEx CreateDIBSection SelectObject DeleteObject DeleteDC CreateRectRgnIndirect CreateRectRgn SwapBuffers GetObjectW DescribePixelFormat CreateCompatibleDC CombineRgn GetDIBits

api-ms-win-core-rtlsupport-l1-1-0

RtlUnwindEx RtlUnwind RtlLookupFunctionEntry RtlPcToFileHeader RtlVirtualUnwind RtlCaptureContext

api-ms-win-core-threadpool-l1-2-0

CreateThreadpoolWork SubmitThreadpoolWork FreeLibraryWhenCallbackReturns CloseThreadpoolWork

api-ms-win-core-util-l1-1-0

DecodePointer EncodePointer

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead InterlockedPushEntrySList

api-ms-win-core-fibers-l1-1-0

FlsFree FlsGetValue FlsSetValue FlsAlloc

api-ms-win-core-console-l1-1-0

WriteConsoleW ReadConsoleW GetConsoleMode GetConsoleOutputCP

api-ms-win-core-winrt-error-l1-1-1

RoOriginateLanguageException

oleaut32

SysStringLen SysFreeString SetErrorInfo GetErrorInfo

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

Name

.text

Size

6.3MB

Virtual Size

6.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

157KB

Virtual Size

250KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

252KB

Virtual Size

251KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

296KB

Virtual Size

295KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

29KB

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-18_32dcd74d9b0c6f68d94f36217e9be6b9_glassworm_icedid_luca-stealer_njrat_stealc

advapi32

ws2_32

bcrypt

crypt32

dbghelp

dwmapi

shell32

winhttp

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-libraryloader-l1-2-1

api-ms-win-core-com-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-heap-l2-1-0

api-ms-win-core-heap-obsolete-l1-1-0

api-ms-win-core-file-l2-1-0

api-ms-win-ntuser-sysparams-l1-1-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-processthreads-l1-1-1

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-psapi-l1-1-0

api-ms-win-core-file-l1-1-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-memory-l1-1-0

api-ms-win-core-toolhelp-l1-1-0

api-ms-win-core-version-l1-1-1

api-ms-win-core-version-l1-1-0

api-ms-win-core-processenvironment-l1-1-0

api-ms-win-core-string-obsolete-l1-1-0

api-ms-win-core-processthreads-l1-1-2

iphlpapi

api-ms-win-core-profile-l1-1-0

api-ms-win-core-synch-l1-2-1

api-ms-win-mm-time-l1-1-0

api-ms-win-core-kernel32-legacy-l1-1-5

api-ms-win-core-sysinfo-l1-2-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-kernel32-legacy-l1-1-0

api-ms-win-core-synch-ansi-l1-1-0

api-ms-win-core-timezone-l1-1-0

api-ms-win-core-heap-l1-1-0

api-ms-win-core-file-l1-2-2

api-ms-win-core-file-l1-2-0

version

opengl32

kernel32

user32

gdi32

api-ms-win-core-rtlsupport-l1-1-0

api-ms-win-core-threadpool-l1-2-0

api-ms-win-core-util-l1-1-0

api-ms-win-core-interlocked-l1-1-0

api-ms-win-core-fibers-l1-1-0

api-ms-win-core-console-l1-1-0

api-ms-win-core-winrt-error-l1-1-1

oleaut32

api-ms-win-core-winrt-l1-1-0

generic