General
- Target 2026-11-03_7e6ad57410dd55fd297675a57efc7e81_glassworm_icedid_luca-stealer_njrat_stealc
- Size 21.7MB
- Sample261104-taaqlabs7v
- SHA256 c8c5a9b8a11dc0354698765ccf79780d2cbfe5cb1b6144c60c942a800d09a704
- MD5 7e6ad57410dd55fd297675a57efc7e81
- SHA1 b3e6940ab36f18ba9721d0f4dff6dcd79c703f49
- SHA512 d44e0c51f65b2f0a2a4ffa676ec7677873e48c0710c09426dda02b87a384c2c03d68572314920dcd321b8b21a845e44ef57ba1f6405794dff2e225dae524a22c
- SSDEEP 393216:WqAWNZ+HH08SP5+KIxijLfRrJiFpg7wV4o5X36fF9c96zPRKYrrVx8b2D5VCfV/w:vAWg4RV2hXuJzPRBJx8bkX
- TLSH T101370276A39812ACC027C438C627DE06F3B1341947B456EF76D46E952F77AE09E3AB01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-03_7e6ad57410dd55fd297675a57efc7e81_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-03_7e6ad57410dd55fd297675a57efc7e81_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-03_7e6ad57410dd55fd297675a57efc7e81_glassworm_icedid_luca-stealer_njrat_stealc
- Size 21.7MB
- SHA256 c8c5a9b8a11dc0354698765ccf79780d2cbfe5cb1b6144c60c942a800d09a704
- MD5 7e6ad57410dd55fd297675a57efc7e81
- SHA1 b3e6940ab36f18ba9721d0f4dff6dcd79c703f49
- SHA512 d44e0c51f65b2f0a2a4ffa676ec7677873e48c0710c09426dda02b87a384c2c03d68572314920dcd321b8b21a845e44ef57ba1f6405794dff2e225dae524a22c
- SSDEEP 393216:WqAWNZ+HH08SP5+KIxijLfRrJiFpg7wV4o5X36fF9c96zPRKYrrVx8b2D5VCfV/w:vAWg4RV2hXuJzPRBJx8bkX
- TLSH T101370276A39812ACC027C438C627DE06F3B1341947B456EF76D46E952F77AE09E3AB01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with VMProtect.
-
Suspicious use of NtSetInformationThreadHideFromDebugger