General
- Target 2026-11-02_c32835a6114dd0c7864b94b581f757cc_glassworm_icedid_luca-stealer_njrat_stealc
- Size 4.0MB
- Sample261102-3fca2sge59
- SHA256 8f117179cd0a26271e03d6d76be4ce848b7010b5e487f1c0093c576ba3060e25
- MD5 c32835a6114dd0c7864b94b581f757cc
- SHA1 0e65a22f972c935a6c7e3c1e402a5088fc2e84af
- SHA512 330ffb328be04fe5e3a9b3a232e1ceecaceed7478f1ec9c22f093f2353265cd8d24e1dcc088cfc7ee116548bd70db6352fd660af6ebd93503d4ee097164f3105
- SSDEEP 98304:rZnuom/BBBBBBBBBBBBBBBBBBBBBBBBBBBBU2lKsqGsQr:rZnuom/BBBBBBBBBBBBBBBBBBBBBBBBl
- TLSH T11E169C97B2B500D8C1A6C1399742E577E7727C1507A48BCF12E16E6B3F279E20DBA720
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-02_c32835a6114dd0c7864b94b581f757cc_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260911-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-02_c32835a6114dd0c7864b94b581f757cc_glassworm_icedid_luca-stealer_njrat_stealc
- Size 4.0MB
- SHA256 8f117179cd0a26271e03d6d76be4ce848b7010b5e487f1c0093c576ba3060e25
- MD5 c32835a6114dd0c7864b94b581f757cc
- SHA1 0e65a22f972c935a6c7e3c1e402a5088fc2e84af
- SHA512 330ffb328be04fe5e3a9b3a232e1ceecaceed7478f1ec9c22f093f2353265cd8d24e1dcc088cfc7ee116548bd70db6352fd660af6ebd93503d4ee097164f3105
- SSDEEP 98304:rZnuom/BBBBBBBBBBBBBBBBBBBBBBBBBBBBU2lKsqGsQr:rZnuom/BBBBBBBBBBBBBBBBBBBBBBBBl
- TLSH T11E169C97B2B500D8C1A6C1399742E577E7727C1507A48BCF12E16E6B3F279E20DBA720
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1