General
- Target 2026-06-06_a11e7203c4dfd5aa5b3f117fdeca075a_elex_glassworm_icedid_njrat_swisyn_vidar
- Size 1.5MB
- Sample260606-w3vbtabw9x
- SHA256 4910c045604fb56070cefa7ada007723066a1e90b40628718d688b2958c685ff
- MD5 a11e7203c4dfd5aa5b3f117fdeca075a
- SHA1 4e62d824598e247987c04da3184e912e04e927bc
- SHA512 6efa605b242a245e85debe7394f4042862729ece34e3b1eb6c400b5f7ab06008ec34d333f9761eafc1e1a141cf9ef63a8d7849f54051d2be1c5f7416546ac34d
- SSDEEP 12288:PFUNDaGJ+n/jN4mQRMTu6UjeF/oYFhLt7m7vTvMoK94eG:PFOam+nrKvRMTulk/oYFhLBEvTvMDeeG
- TLSH T1BC7516912A54D4DAF322C8B4C0A2DFAFD5B13C350B61858752E5B67F5B3B3A63D39202
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-06_a11e7203c4dfd5aa5b3f117fdeca075a_elex_glassworm_icedid_njrat_swisyn_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-06_a11e7203c4dfd5aa5b3f117fdeca075a_elex_glassworm_icedid_njrat_swisyn_vidar.exe
Resource
win11-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-06_a11e7203c4dfd5aa5b3f117fdeca075a_elex_glassworm_icedid_njrat_swisyn_vidar
- Size 1.5MB
- SHA256 4910c045604fb56070cefa7ada007723066a1e90b40628718d688b2958c685ff
- MD5 a11e7203c4dfd5aa5b3f117fdeca075a
- SHA1 4e62d824598e247987c04da3184e912e04e927bc
- SHA512 6efa605b242a245e85debe7394f4042862729ece34e3b1eb6c400b5f7ab06008ec34d333f9761eafc1e1a141cf9ef63a8d7849f54051d2be1c5f7416546ac34d
- SSDEEP 12288:PFUNDaGJ+n/jN4mQRMTu6UjeF/oYFhLt7m7vTvMoK94eG:PFOam+nrKvRMTulk/oYFhLBEvTvMDeeG
- TLSH T1BC7516912A54D4DAF322C8B4C0A2DFAFD5B13C350B61858752E5B67F5B3B3A63D39202
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory