General
- Target 2026-10-26_a292de41dde258cdaa1f8b8ae4de8aa6_glassworm_icedid_luca-stealer_njrat_rhadamanthys_stealc
- Size 59.5MB
- Sample261027-mecbnab19x
- SHA256 e14cca920f21c60780efb659974943423fcdedcffb25f22badae2cc15a42ae28
- MD5 a292de41dde258cdaa1f8b8ae4de8aa6
- SHA1 5b05aa97642cb44a4604fb16f5cd61e4bf9db676
- SHA512 873147af20fae70bc0010ee439fe3759e68b36f04bccc0305db1d922e7fe4b221ff01019b449ea33ee3064b6a702961771013b82401520bdeaa647b567a051d0
- SSDEEP 1572864:ZGMTcVDASnDMDq86y+sPXRF/bNvbOk5KAXmEPiYSRJA2:ZVw6SDMq86yrPzVOI6S2
- TLSH T1A6D7335AE7A942A9C0D3C07E855A5013FA3238461374E6EB93F08A565F377E06E7D3B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-10-26_a292de41dde258cdaa1f8b8ae4de8aa6_glassworm_icedid_luca-stealer_njrat_rhadamanthys_stealc.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_a292de41dde258cdaa1f8b8ae4de8aa6_glassworm_icedid_luca-stealer_njrat_rhadamanthys_stealc.exe
Resource
win11ltsc2024-20260911-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_a292de41dde258cdaa1f8b8ae4de8aa6_glassworm_icedid_luca-stealer_njrat_rhadamanthys_stealc
- Size 59.5MB
- SHA256 e14cca920f21c60780efb659974943423fcdedcffb25f22badae2cc15a42ae28
- MD5 a292de41dde258cdaa1f8b8ae4de8aa6
- SHA1 5b05aa97642cb44a4604fb16f5cd61e4bf9db676
- SHA512 873147af20fae70bc0010ee439fe3759e68b36f04bccc0305db1d922e7fe4b221ff01019b449ea33ee3064b6a702961771013b82401520bdeaa647b567a051d0
- SSDEEP 1572864:ZGMTcVDASnDMDq86y+sPXRF/bNvbOk5KAXmEPiYSRJA2:ZVw6SDMq86yrPzVOI6S2
- TLSH T1A6D7335AE7A942A9C0D3C07E855A5013FA3238461374E6EB93F08A565F377E06E7D3B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.