2026-10-25_7be21be4067e4fd66868d0c99f3b1c2b_glassworm_icedid_luca-stealer_njrat_stealc_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-25_7be21be4067e4fd66868d0c99f3b1c2b_glassworm_icedid_luca-stealer_njrat_stealc_vidar
Size 8.7MB
Sample261026-2vc1fscb66
SHA256 fe984bfa037d57e1766f30452049862379c7ed7c2505393a16432773b53e686b
MD5 7be21be4067e4fd66868d0c99f3b1c2b
SHA1 479d7e72ab2bfd9ce4c8cc6cfdf0cdb65ce8c5bc
SHA512 49a011729031668b99b31afcd81f9d605eeae5c450023d9cc9d86a685d1ee8f8ad3aab7a0a1af8674ca3fcb36a54458fcab87acdb318951257f2135f6a589ee5
SSDEEP 49152:gDvvbEIB7BuxtNyA+2dqnUfs/NN3VjfzJGI4yBmLIM25VT8+HEpuxPNyAi2dqxMC:FrxdqnMENdfzJpvkxUxXzDEKbaoZZI9
TLSH
T1C996BF89A561C0AAEF5516B4E8D712F3AAA57EC4C34083D34A7D7C207E337FA0D6E650
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-25_7be21be4067e4fd66868d0c99f3b1c2b_glassworm_icedid_luca-stealer_njrat_stealc_vidar

File Explorer

2026-10-25_7be21be4067e4fd66868d0c99f3b1c2b_glassworm_icedid_luca-stealer_njrat_stealc_vidar

.exe 8.7MB

2026-10-25_7be21be4067e4fd66868d0c99f3b1c2b_glassworm_icedid_luca-stealer_njrat_stealc_vidar

IMPHASH 176517c949ff3e55ac40b750fd46d67f
SHA256 fe984bfa037d57e1766f30452049862379c7ed7c2505393a16432773b53e686b
MD5 7be21be4067e4fd66868d0c99f3b1c2b
SHA1 479d7e72ab2bfd9ce4c8cc6cfdf0cdb65ce8c5bc
SHA512 49a011729031668b99b31afcd81f9d605eeae5c450023d9cc9d86a685d1ee8f8ad3aab7a0a1af8674ca3fcb36a54458fcab87acdb318951257f2135f6a589ee5
SSDEEP 49152:gDvvbEIB7BuxtNyA+2dqnUfs/NN3VjfzJGI4yBmLIM25VT8+HEpuxPNyAi2dqxMC:FrxdqnMENdfzJpvkxUxXzDEKbaoZZI9
TLSH
T1C996BF89A561C0AAEF5516B4E8D712F3AAA57EC4C34083D34A7D7C207E337FA0D6E650
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

551604

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\quero chocolexx\Desktop\NewStack\Imgui v1.0\build\Release\NewInj.pdb

kernel32

MultiByteToWideChar GetExitCodeThread GetTempPathA VirtualAllocEx CreateRemoteThread VirtualFreeEx GetTickCount UnmapViewOfFile CreateFileMappingW MapViewOfFile VirtualFree VirtualAlloc GetCurrentProcess LocalFree HeapFree GetCurrentThreadId CreateFileA DeleteFileA HeapAlloc GetFileSize GetProcessHeap OpenThread CreateDirectoryW lstrcpynA OutputDebugStringA GlobalFree GlobalUnlock GetLocaleInfoA LoadLibraryA QueryPerformanceFrequency IsDBCSLeadByte FreeLibrary QueryPerformanceCounter WriteFile InitializeSListHead GetSystemTimeAsFileTime GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter WakeAllConditionVariable SleepConditionVariableSRW AcquireSRWLockExclusive ReleaseSRWLockExclusive InitOnceBeginInitialize InitOnceComplete WriteProcessMemory SetConsoleTitleW OpenProcess CreateFileW WaitForSingleObject GlobalLock AllocConsole GetConsoleWindow WideCharToMultiByte GetModuleHandleW GlobalMemoryStatusEx GetCurrentProcessId GetComputerNameW GetProcAddress GetLocalTime GetNativeSystemInfo CloseHandle Process32FirstW Process32NextW GetLastError GetTickCount64 Sleep CreateToolhelp32Snapshot GetModuleHandleA GetTempPathW CreateMutexW GetEnvironmentVariableW GlobalAlloc GetModuleFileNameW

user32

GetKeyState GetMessageExtraInfo GetCapture ClientToScreen TrackMouseEvent GetKeyboardLayout GetForegroundWindow FindWindowW SetCapture SetCursor GetClientRect IsWindowUnicode ReleaseCapture SetCursorPos GetCursorPos OpenClipboard CloseClipboard LoadCursorW DestroyWindow PostQuitMessage TranslateMessage PeekMessageW CreateWindowExW DeleteMenu ScreenToClient DispatchMessageW GetAsyncKeyState ShowWindow RegisterClassExW SetWindowTextW UnregisterClassW GetSystemMetrics UpdateWindow IsIconic EmptyClipboard GetClipboardData SetClipboardData GetKeyNameTextA MapVirtualKeyA DefWindowProcW GetSystemMenu SetForegroundWindow

advapi32

AdjustTokenPrivileges RevertToSelf GetUserNameW CheckTokenMembership FreeSid AllocateAndInitializeSid CryptReleaseContext CryptGenRandom CryptAcquireContextW LookupPrivilegeValueW GetTokenInformation DuplicateTokenEx ConvertSidToStringSidW SetThreadToken OpenProcessToken

shell32

ShellExecuteW SHGetFolderPathW

msvcp140

?__ExceptionPtrAssign@@YAXPEAXPEBX@Z ?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ ?_ReportUnobservedException@details@Concurrency@@YAXXZ ?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z ?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z ?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z ?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ ?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ ?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ ?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z ??0task_continuation_context@Concurrency@@AEAA@XZ _Cnd_unregister_at_thread_exit ?__ExceptionPtrCreate@@YAXPEAX@Z ?__ExceptionPtrCopy@@YAXPEAXPEBX@Z _Query_perf_frequency ?_Throw_Cpp_error@std@@YAXH@Z ?_Xbad_function_call@std@@YAXXZ ?_Xlength_error@std@@YAXPEBD@Z ?_Syserror_map@std@@YAPEBDH@Z ?__ExceptionPtrToBool@@YA_NPEBX@Z ?__ExceptionPtrDestroy@@YAXPEAX@Z _Mtx_lock ?__ExceptionPtrCurrentException@@YAXPEAX@Z ?__ExceptionPtrRethrow@@YAXPEBX@Z _Cnd_register_at_thread_exit _Cnd_do_broadcast_at_thread_exit _Cnd_wait _Thrd_id _Query_perf_counter _Thrd_join _Mtx_unlock _Cnd_broadcast

d3d11

D3D11CreateDeviceAndSwapChain

ntdll

NtOpenSection NtQuerySystemInformation NtUnmapViewOfSection NtMapViewOfSection RtlCaptureContext RtlInitUnicodeString RtlVirtualUnwind RtlLookupFunctionEntry NtCreateFile

imm32

ImmSetCompositionWindow ImmReleaseContext ImmGetContext ImmSetCandidateWindow

d3dcompiler_47

D3DCompile

vcruntime140_1

__CxxFrameHandler4

vcruntime140

strstr __C_specific_handler __std_exception_destroy __std_exception_copy _purecall strchr __current_exception __current_exception_context _CxxThrowException memset memcmp memchr memmove __std_terminate memcpy

api-ms-win-crt-utility-l1-1-0

qsort srand rand

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf __stdio_common_vsnprintf_s _wfopen freopen_s fseek fputc ftell __stdio_common_vsprintf __acrt_iob_func fopen_s _set_fmode __stdio_common_vfprintf fread __p__commode _wfopen_s fputs fwrite fclose fflush

api-ms-win-crt-runtime-l1-1-0

exit terminate _exit _initterm_e _initterm _get_wide_winmain_command_line _initialize_wide_environment _configure_wide_argv abort _c_exit _set_app_type _seh_filter_exe _invoke_watson _cexit _wassert _register_thread_local_exe_atexit_callback _beginthreadex _crt_atexit _initialize_onexit_table _register_onexit_function

api-ms-win-crt-string-l1-1-0

_stricmp strcmp strncmp wcscpy_s strncpy _wcsicmp strcat_s wcscat_s

api-ms-win-crt-heap-l1-1-0

_set_new_mode malloc free _callnewh

api-ms-win-crt-convert-l1-1-0

atof

api-ms-win-crt-time-l1-1-0

_localtime64_s _time64

api-ms-win-crt-math-l1-1-0

atan2f sqrtf sinf powf pow logf log fmodf cosf ceilf acosf __setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Name

.text

Size

542KB

Virtual Size

542KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

8.1MB

Virtual Size

8.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

23KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.altar

Size

512B

Virtual Size

108B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

928B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-25_7be21be4067e4fd66868d0c99f3b1c2b_glassworm_icedid_luca-stealer_njrat_stealc_vidar

kernel32

user32

advapi32

shell32

msvcp140

d3d11

ntdll

imm32

d3dcompiler_47

vcruntime140_1

vcruntime140

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic