2026-10-22_43d192340865d520d7e9afaa13d57144_glassworm_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-22_43d192340865d520d7e9afaa13d57144_glassworm_icedid_luca-stealer_njrat_stealc
Size 5.1MB
Sample261024-sd2stact5k
SHA256 7cc898ba07d13803f4b2019a6500ab9beaa1c2ee8184fdfc0ba8acd363f9ad86
MD5 43d192340865d520d7e9afaa13d57144
SHA1 409d7b4b575d20dfeee5a77e969b22d917357557
SHA512 50e677918b005c5fdf6d8ef1e3bcbfe0a8d820780ae40c2f6ab594a4efa424dcf19e7857827e98c3da7f3e723ff8a4810d2cae2ac8b9e58e95b6ae61c96780a4
SSDEEP 49152:TVyw49jqjkIBQx4N30gcDz5M7Gj0/qXKvwexHWOffcCYrkG5rjebp6uf5NaIumNn:gVg2S5k4v1fTMkGtONaIumznIzo/h
TLSH
T17C36BE17A2E401ECD036C178CEAADA02F7B5745607716BEF369C4A6A1F636E40E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_43d192340865d520d7e9afaa13d57144_glassworm_icedid_luca-stealer_njrat_stealc

File Explorer

2026-10-22_43d192340865d520d7e9afaa13d57144_glassworm_icedid_luca-stealer_njrat_stealc

.exe 5.1MB

2026-10-22_43d192340865d520d7e9afaa13d57144_glassworm_icedid_luca-stealer_njrat_stealc

IMPHASH 873a799d314dd32b91c01361f39e83b9
SHA256 7cc898ba07d13803f4b2019a6500ab9beaa1c2ee8184fdfc0ba8acd363f9ad86
MD5 43d192340865d520d7e9afaa13d57144
SHA1 409d7b4b575d20dfeee5a77e969b22d917357557
SHA512 50e677918b005c5fdf6d8ef1e3bcbfe0a8d820780ae40c2f6ab594a4efa424dcf19e7857827e98c3da7f3e723ff8a4810d2cae2ac8b9e58e95b6ae61c96780a4
SSDEEP 49152:TVyw49jqjkIBQx4N30gcDz5M7Gj0/qXKvwexHWOffcCYrkG5rjebp6uf5NaIumNn:gVg2S5k4v1fTMkGtONaIumznIzo/h
TLSH
T17C36BE17A2E401ECD036C178CEAADA02F7B5745607716BEF369C4A6A1F636E40E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3045320

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

astolfo.pdb

d3d11

D3D11CreateDevice

d3dcompiler_47

D3DCompile

ole32

CoInitializeEx CoCreateInstance CoUninitialize CoTaskMemFree

dxgi

CreateDXGIFactory1

dwmapi

DwmExtendFrameIntoClientArea DwmGetWindowAttribute

dcomp

DCompositionCreateDevice

winmm

timeBeginPeriod timeEndPeriod

ntdll

RtlPcToFileHeader RtlUnwind RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind RtlUnwindEx

comdlg32

GetOpenFileNameW

advapi32

RegGetValueW RegOpenKeyExA RegQueryValueExA RegCloseKey RegCreateKeyExW RegSetValueExW

shell32

SHFileOperationW SHGetKnownFolderPath

bcrypt

BCryptGenRandom BCryptHash

kernel32

CompareStringW GetTimeFormatW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetConsoleOutputCP GetConsoleMode ReadConsoleW GetTimeZoneInformation GetExitCodeProcess CreatePipe DuplicateHandle GetFileType SetStdHandle GetDateFormatW VirtualProtect CreateMutexW GetLastError CloseHandle SetDefaultDllDirectories SetEvent CreateEventW WaitForMultipleObjects CreateWaitableTimerExW CreateWaitableTimerW SwitchToThread SetWaitableTimer Sleep SetThreadPriority GetCurrentThread SetThreadInformation WaitForSingleObject CreateToolhelp32Snapshot Process32FirstW OpenProcess QueryFullProcessImageNameW Process32NextW MultiByteToWideChar CompareStringOrdinal ReadProcessMemory Module32FirstW Module32NextW VirtualQueryEx LoadLibraryExA GetProcAddress WideCharToMultiByte GetModuleHandleW GetFileAttributesW GetWindowsDirectoryW CreateProcessW QueryPerformanceFrequency QueryPerformanceCounter GetTickCount64 GetCurrentThreadId SetLastError GetProcessTimes GetCurrentProcess GetSystemTimeAsFileTime GetSystemInfo OutputDebugStringA lstrcmpW GetCurrentProcessId GlobalAlloc GlobalLock GlobalUnlock GlobalFree MoveFileExW GetLocaleInfoA LoadLibraryA FreeLibrary CreateFileW GetFileSizeEx SetFilePointerEx WriteFile ReleaseMutex SetEndOfFile SetUnhandledExceptionFilter GetModuleFileNameW GetModuleHandleExW FlushFileBuffers GetFileInformationByHandle ReadFile DeleteFileW GetModuleFileNameA FormatMessageA CreateFileA HeapAlloc HeapReAlloc HeapFree GetProcessHeap MapViewOfFile UnmapViewOfFile CreateFileMappingA FreeLibraryAndExitThread ExitThread CreateThread LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount GetStartupInfoW IsDebuggerPresent InitializeSListHead TerminateProcess UnhandledExceptionFilter GetCPInfo GetStringTypeW LCMapStringEx ExitProcess DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection DecodePointer EncodePointer CloseThreadpoolWork SubmitThreadpoolWork CreateThreadpoolWork FreeLibraryWhenCallbackReturns IsProcessorFeaturePresent RaiseException InitOnceComplete InitOnceBeginInitialize GetFileInformationByHandleEx CopyFileW AreFileApisANSI SetFileInformationByHandle GetFullPathNameW GetFinalPathNameByHandleW GetFileAttributesExW FindNextFileW FindFirstFileExW FindFirstFileW FindClose CreateDirectoryW AcquireSRWLockShared ReleaseSRWLockShared WakeConditionVariable GetLocaleInfoEx LocalFree SleepConditionVariableSRW WakeAllConditionVariable GetExitCodeThread WaitForSingleObjectEx TryAcquireSRWLockExclusive AcquireSRWLockExclusive FlsFree IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW HeapSize GetTempPathW WriteConsoleW FlsSetValue FlsGetValue FlsAlloc GetCommandLineW GetCommandLineA GetStdHandle ReleaseSRWLockExclusive

user32

SendInput GetClipboardData SetClipboardData CloseClipboard EmptyClipboard OpenClipboard PtInRect GetWindowRect UnhookWinEvent SetWinEventHook IntersectRect GetWindowPlacement IsWindowVisible IsIconic SetWindowPos MonitorFromRect EnumWindows GetClassNameW GetWindow CreateWindowExW PostQuitMessage LoadCursorA SetCursor DefWindowProcW GetDpiForWindow EnumThreadWindows GetParent SetWindowsHookExW GetWindowLongPtrW GetCursorInfo GetKeyboardLayout ToUnicodeEx GetKeyboardState WindowFromPoint ScreenToClient GetMonitorInfoW MonitorFromWindow UnregisterClassW DestroyWindow ShowWindow SetWindowDisplayAffinity PostMessageW MsgWaitForMultipleObjectsEx DispatchMessageW TranslateMessage PeekMessageW RegisterClassExW GetClassInfoExW SetLayeredWindowAttributes GetKeyNameTextW MapVirtualKeyW GetWindowThreadProcessId GetForegroundWindow GetCursorPos FindWindowW IsWindow SetCursorPos ClientToScreen GetAncestor GetGUIThreadInfo GetClientRect GetAsyncKeyState ClipCursor PostThreadMessageW SetProcessDpiAwarenessContext MessageBoxW UnhookWindowsHookEx CallNextHookEx SetWindowLongPtrW GetMessageW EnumDisplaySettingsW

imm32

ImmReleaseContext ImmGetContext ImmSetCandidateWindow ImmSetCompositionWindow

Name

.text

Size

3.2MB

Virtual Size

3.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

570KB

Virtual Size

715KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

120KB

Virtual Size

119KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_43d192340865d520d7e9afaa13d57144_glassworm_icedid_luca-stealer_njrat_stealc

d3d11

d3dcompiler_47

ole32

dxgi

dwmapi

dcomp

winmm

ntdll

comdlg32

advapi32

shell32

bcrypt

kernel32

user32

imm32

generic