General
- Target 2026-05-22_559fa80055286561b9d4dbe11d92c773_glassworm_icedid_njrat_ryuk
- Size 1.2MB
- Sample260522-ryadmagv31
- SHA256 089a63883a3186fa5a18d98a2013272fae580ec173e7fb59495d9d53fee5ba28
- MD5 559fa80055286561b9d4dbe11d92c773
- SHA1 0652d9479a2ba188572c13c723bb79f4459b0ba0
- SHA512 da84f6c896c72a8fe84c20f2b8376e6bd62ed11841cb05830f6888bc549f36b7cc43072e5c6c1ce8ffaf6b0a608bc27a2aef42851c803fba3d32030be81380f4
- SSDEEP 24576:XrObycn9MpkGJrWoXRDOVwZhAih9pf1HjnamWzRdaz/zdA+Pol:XrObh9MpkGJrNOV189pf1HWzRYz/zq+P
- TLSH T18745D117B39404F8D06EC27ACB269122FAB1F4454A74BA9F13A447612F37E585F3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-22_559fa80055286561b9d4dbe11d92c773_glassworm_icedid_njrat_ryuk.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-22_559fa80055286561b9d4dbe11d92c773_glassworm_icedid_njrat_ryuk.exe
Resource
win11-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-22_559fa80055286561b9d4dbe11d92c773_glassworm_icedid_njrat_ryuk
- Size 1.2MB
- SHA256 089a63883a3186fa5a18d98a2013272fae580ec173e7fb59495d9d53fee5ba28
- MD5 559fa80055286561b9d4dbe11d92c773
- SHA1 0652d9479a2ba188572c13c723bb79f4459b0ba0
- SHA512 da84f6c896c72a8fe84c20f2b8376e6bd62ed11841cb05830f6888bc549f36b7cc43072e5c6c1ce8ffaf6b0a608bc27a2aef42851c803fba3d32030be81380f4
- SSDEEP 24576:XrObycn9MpkGJrWoXRDOVwZhAih9pf1HjnamWzRdaz/zdA+Pol:XrObh9MpkGJrNOV189pf1HWzRYz/zq+P
- TLSH T18745D117B39404F8D06EC27ACB269122FAB1F4454A74BA9F13A447612F37E585F3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory