Overview

overview

7

Static

static

5

2026-10-22...lc.exe

windows10-2004-x64

7

2026-10-22...lc.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-10-22_39c947ba2ae52a8a258512233e69601d_akira_glassworm_icedid_luca-stealer_njrat_rusty-stealer_stealc
  • Size 7.8MB
  • Sample261024-ttkpxazz3j
  • SHA256 0bd9cd4c43b605502481791207b1d60df4f701d0bae6db3bf89dadc7becde7b9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
defense_evasiondiscoveryexecutionspywarestealerupx

Malware Config

Targets

    • Target
      2026-10-22_39c947ba2ae52a8a258512233e69601d_akira_glassworm_icedid_luca-stealer_njrat_rusty-stealer_stealc
    • Size 7.8MB
    • SHA256 0bd9cd4c43b605502481791207b1d60df4f701d0bae6db3bf89dadc7becde7b9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    defense_evasiondiscoveryexecutionspywarestealerupx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Uses WMI to collect hardware manufacturer information

      Uses WMI to read the system manufacturer, model, baseboard or display adapter, which is often used to detect virtual machines and evade sandboxes.

      defense_evasion

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks