Analysis
- max time kernel
149s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
02/06/2026, 16:16
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-02_d1a25c05ebc678efa6f75b38a4f10d20_amadey_glassworm_icedid_njrat_vidar_wannacry.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_d1a25c05ebc678efa6f75b38a4f10d20_amadey_glassworm_icedid_njrat_vidar_wannacry.exe
Resource
win11-20260513-en
3 signatures
150 seconds
General
- Target 2026-06-02_d1a25c05ebc678efa6f75b38a4f10d20_amadey_glassworm_icedid_njrat_vidar_wannacry.exe
- Size 1.3MB
- Sample260602-tqsaksh19x
- SHA256 fde712ccfb90966368152ae909b3a01afbb3bef7acafd822a9d38a8e6f464311
- MD5 d1a25c05ebc678efa6f75b38a4f10d20
- SHA1 9fb00550bd5d89a3010ee079b52e5a0a72e8b63a
- SHA512 8c58e73282d472fdc66ce851b267216bb6c486f617418ce4a5e07c4aa2f3ca71b8eb617e8bb2aa83732a170393dc4e2a5e7dc21408c41089735ad5488c0ed76b
- SSDEEP 24576:nZe0p4Ek4niOkl/A04szE87JKTvmaslZOZgExqatgl8bY:ZeW4SkZP4sz9MbgUqatgl
- TLSH T107552956F6788773D0B3C07AC5D7AA9AFA7234461B308ACB0345932C2E237D59A36735
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 660 2026-06-02_d1a25c05ebc678efa6f75b38a4f10d20_amadey_glassworm_icedid_njrat_vidar_wannacry.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 660 2026-06-02_d1a25c05ebc678efa6f75b38a4f10d20_amadey_glassworm_icedid_njrat_vidar_wannacry.exe Token: 35 660 2026-06-02_d1a25c05ebc678efa6f75b38a4f10d20_amadey_glassworm_icedid_njrat_vidar_wannacry.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-06-02_d1a25c05ebc678efa6f75b38a4f10d20_amadey_glassworm_icedid_njrat_vidar_wannacry.exe"C:\Users\Admin\AppData\Local\Temp\2026-06-02_d1a25c05ebc678efa6f75b38a4f10d20_amadey_glassworm_icedid_njrat_vidar_wannacry.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
PID:660