2026-04-03_2a49704ed3ce71cba1b26dd199574ea8_amadey_elex_glassworm_icedid_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-04-03_2a49704ed3ce71cba1b26dd199574ea8_amadey_elex_glassworm_icedid_njrat
Size 7.1MB
Sample260403-dpth9agv7l
SHA256 65abe3934f277ab7c7303742e0772770a8aca7372e1f396da642e2a417f05d50
MD5 2a49704ed3ce71cba1b26dd199574ea8
SHA1 50cb383b3c2be022c8cea4dfce411017fea4f6e9
SHA512 45c0f4fcbbcd1fd56cb3fa7e533e4effd4ed0e34735518ab38a6b7f9e8b7e1c9e9bc2d19008aa6a86b4cf6b543f6c48dfddd3070878bc3146f19bae6eb7ffeda
SSDEEP 98304:Ou7lQqtvReOFQylDgN/8EZEKwfG4tp+WWU/rQh1DknLrHp/qKm2/Sb/gqA:Ou795eygxefG42WWVh1WrRb/G
TLSH
T1C076DE57EB814AD9E3990832DF148150D72AF1699BFF2221345812CCEE87387BF65A3D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-04-03_2a49704ed3ce71cba1b26dd199574ea8_amadey_elex_glassworm_icedid_njrat

File Explorer

2026-04-03_2a49704ed3ce71cba1b26dd199574ea8_amadey_elex_glassworm_icedid_njrat

.exe 7.1MB

2026-04-03_2a49704ed3ce71cba1b26dd199574ea8_amadey_elex_glassworm_icedid_njrat

IMPHASH 2eabe9054cad5152567f0699947a2c5b
SHA256 65abe3934f277ab7c7303742e0772770a8aca7372e1f396da642e2a417f05d50
MD5 2a49704ed3ce71cba1b26dd199574ea8
SHA1 50cb383b3c2be022c8cea4dfce411017fea4f6e9
SHA512 45c0f4fcbbcd1fd56cb3fa7e533e4effd4ed0e34735518ab38a6b7f9e8b7e1c9e9bc2d19008aa6a86b4cf6b543f6c48dfddd3070878bc3146f19bae6eb7ffeda
SSDEEP 98304:Ou7lQqtvReOFQylDgN/8EZEKwfG4tp+WWU/rQh1DknLrHp/qKm2/Sb/gqA:Ou795eygxefG42WWVh1WrRb/G
TLSH
T1C076DE57EB814AD9E3990832DF148150D72AF1699BFF2221345812CCEE87387BF65A3D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

12599296

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

Size

2.5MB

Virtual Size

6.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

688B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

3.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

dkqxmldn

Size

1.8MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

ajwrokqy

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.taggant

Size

8KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

jseObkUc

Size

112KB

Virtual Size

112KB

Characteristics

Name

LPoaMcKI

Size

4KB

Virtual Size

4KB

Characteristics

Name

EfAIISot

Size

4KB

Virtual Size

4KB

Characteristics

Name

BjNTiATm

Size

11KB

Virtual Size

10KB

Characteristics

Name

gqhlNJJV

Size

2.2MB

Virtual Size

2.2MB

Characteristics

Name

tBTnHALq

Size

332KB

Virtual Size

332KB

Characteristics

Name

cfdoektG

Size

3KB

Virtual Size

3KB

Characteristics

Name

VqDDooiL

Size

17KB

Virtual Size

17KB

Characteristics

Name

McymudzY

Size

5KB

Virtual Size

4KB

Characteristics

Name

NxQbvUBu

Size

57KB

Virtual Size

56KB

Characteristics

2026-04-03_2a49704ed3ce71cba1b26dd199574ea8_amadey_elex_glassworm_icedid_njrat

kernel32

generic