General
- Target 2026-05-11_2183f834138a3cbacc91c8a73d5ac591_glassworm_icedid_njrat_ryuk
- Size 5.2MB
- Sample260511-b15pjscy2r
- SHA256 e40adf069cabf03bc68b545adf685dc3d27ba993a4982392b3a6574174c1d1db
- MD5 2183f834138a3cbacc91c8a73d5ac591
- SHA1 256d34a2b53bc6871c1f1af658abf40f4a8c1bec
- SHA512 3f6ffeb847c32d7cfecaed600f28d81992a9e76734513d520a818d79461f29dc1d0742114dbc49cc95b7a7ac4c2873d814d6ad5614fdf8a5be1cd36b55c618cd
- SSDEEP 49152:0OBiVNVE2YVq3C+WXBc25ckmfbDwZT5wt4VdFXP74fiXzMPh6FlcF5bmr+EelTYu:Nc5mqa5w6dufkFcr66B2Bobj1ELm
- TLSH T10D467D53F3B611F8C41EC9B44B1E552299647C8A4734A3EF0AE877221A75ED86F3DB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-11_2183f834138a3cbacc91c8a73d5ac591_glassworm_icedid_njrat_ryuk.exe
Resource
win10v2004-20250619-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-11_2183f834138a3cbacc91c8a73d5ac591_glassworm_icedid_njrat_ryuk.exe
Resource
win11-20250619-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-11_2183f834138a3cbacc91c8a73d5ac591_glassworm_icedid_njrat_ryuk
- Size 5.2MB
- SHA256 e40adf069cabf03bc68b545adf685dc3d27ba993a4982392b3a6574174c1d1db
- MD5 2183f834138a3cbacc91c8a73d5ac591
- SHA1 256d34a2b53bc6871c1f1af658abf40f4a8c1bec
- SHA512 3f6ffeb847c32d7cfecaed600f28d81992a9e76734513d520a818d79461f29dc1d0742114dbc49cc95b7a7ac4c2873d814d6ad5614fdf8a5be1cd36b55c618cd
- SSDEEP 49152:0OBiVNVE2YVq3C+WXBc25ckmfbDwZT5wt4VdFXP74fiXzMPh6FlcF5bmr+EelTYu:Nc5mqa5w6dufkFcr66B2Bobj1ELm
- TLSH T10D467D53F3B611F8C41EC9B44B1E552299647C8A4734A3EF0AE877221A75ED86F3DB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1