General
- Target 2026-05-04_462aa781b23741680f918ea34448cbf8_elex_glassworm_icedid_njrat_rhadamanthys
- Size 1.9MB
- Sample260504-macfvsgv3v
- SHA256 7d70ade63584563aafe7c2e7c99ee965d134b790e348885e93c8727cd13488dd
- MD5 462aa781b23741680f918ea34448cbf8
- SHA1 d1f82a12f50fc00ed115d99aff214c3da52cf14a
- SHA512 6ac45e53d5bf7f2dc9971a40b0c468bc5a66106fdece955a566c2f69255b91833ff9e91b3db543e93156fd61c30208df646134fe10d9bcb5dc53da694efa15b3
- SSDEEP 24576:KANI5NAVDKUTbQIzFLwLIM0iwg99Vpibu9n:KACgVmgbQIzZMPXpB9n
- TLSH T1EF95E457EB814AD9E78D0836DF548150972AF2699BFF1261346802CCDE87387BF61A3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-04_462aa781b23741680f918ea34448cbf8_elex_glassworm_icedid_njrat_rhadamanthys.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.47.76
-
218.54.47.77
-
218.54.47.74
Targets
-
- Target 2026-05-04_462aa781b23741680f918ea34448cbf8_elex_glassworm_icedid_njrat_rhadamanthys
- Size 1.9MB
- SHA256 7d70ade63584563aafe7c2e7c99ee965d134b790e348885e93c8727cd13488dd
- MD5 462aa781b23741680f918ea34448cbf8
- SHA1 d1f82a12f50fc00ed115d99aff214c3da52cf14a
- SHA512 6ac45e53d5bf7f2dc9971a40b0c468bc5a66106fdece955a566c2f69255b91833ff9e91b3db543e93156fd61c30208df646134fe10d9bcb5dc53da694efa15b3
- SSDEEP 24576:KANI5NAVDKUTbQIzFLwLIM0iwg99Vpibu9n:KACgVmgbQIzZMPXpB9n
- TLSH T1EF95E457EB814AD9E78D0836DF548150972AF2699BFF1261346802CCDE87387BF61A3C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE