General
- Target 2026-06-02_a03e4e030a27c2e4c4831e8519b45b47_elex_glassworm_icedid_njrat_rhadamanthys_stop
- Size 1.1MB
- Sample260602-dxe1tscx9v
- SHA256 a42d29ffb3b4d1e76048c9692411bb55669538a6b9aa9efe4d9c3917e73289ec
- MD5 a03e4e030a27c2e4c4831e8519b45b47
- SHA1 0db48ae853aadac324a5555bc86d28e1fbb2ada6
- SHA512 d34780e050038046e27cfad04cac98af388e278206f4c20f27b34ffd3a0620bf1a7915ff94ca9728ede346c52ad86aca395ddee8453dd57dc6c3a14b282a05ca
- SSDEEP 6144:/FjBFqTP6sSqer5+nDFoSsL4IFchH89/drLHgDe7eVvaDtZVvxjpr:Bv2ter5+nZoXL1KA1YaP
- TLSH T1D535E6A7E7918AD8E65D08766F244161D72EF222AB0F6361395C420DCF4738B8F65E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-02_a03e4e030a27c2e4c4831e8519b45b47_elex_glassworm_icedid_njrat_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
neconyd
C2
-
http://ow5dirasuek.com/
-
http://mkkuei4kdsz.com/
-
http://lousta.net/
Targets
-
- Target 2026-06-02_a03e4e030a27c2e4c4831e8519b45b47_elex_glassworm_icedid_njrat_rhadamanthys_stop
- Size 1.1MB
- SHA256 a42d29ffb3b4d1e76048c9692411bb55669538a6b9aa9efe4d9c3917e73289ec
- MD5 a03e4e030a27c2e4c4831e8519b45b47
- SHA1 0db48ae853aadac324a5555bc86d28e1fbb2ada6
- SHA512 d34780e050038046e27cfad04cac98af388e278206f4c20f27b34ffd3a0620bf1a7915ff94ca9728ede346c52ad86aca395ddee8453dd57dc6c3a14b282a05ca
- SSDEEP 6144:/FjBFqTP6sSqer5+nDFoSsL4IFchH89/drLHgDe7eVvaDtZVvxjpr:Bv2ter5+nZoXL1KA1YaP
- TLSH T1D535E6A7E7918AD8E65D08766F244161D72EF222AB0F6361395C420DCF4738B8F65E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)