General
- Target 2026-06-27_0e43cb95e650559ad1a0e97f1a65d276_elex_glassworm_hijackloader_icedid_njrat_vidar
- Size 3.7MB
- Sample260629-l4869acw2n
- SHA256 989a2ff2356ee60f51e5b35bf3bf33a751cf6644e0868212add41b7f4ebf9b6f
- MD5 0e43cb95e650559ad1a0e97f1a65d276
- SHA1 2c63bf35029290f37aed0d112a13e4bef8cccc20
- SHA512 9815bb993a595757a30413db3f83d4a2984b8ed5ced2025cbad65cec99dfc0d14a4fd52e71b24063ad51afcd8da5614d97d566fb9d0006ec020932b88432ebe3
- SSDEEP 49152:9TAnyT3S9tsgX8zEC8ULgCSA/Bkj0RVBXdc2:9TAnyTIOSAjdt
- TLSH T156064B1EFFE44E27E16E563E90314B3D53A5AD3A9A36D60E7404B85EC4B2F028917723
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-27_0e43cb95e650559ad1a0e97f1a65d276_elex_glassworm_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_0e43cb95e650559ad1a0e97f1a65d276_elex_glassworm_hijackloader_icedid_njrat_vidar
- Size 3.7MB
- SHA256 989a2ff2356ee60f51e5b35bf3bf33a751cf6644e0868212add41b7f4ebf9b6f
- MD5 0e43cb95e650559ad1a0e97f1a65d276
- SHA1 2c63bf35029290f37aed0d112a13e4bef8cccc20
- SHA512 9815bb993a595757a30413db3f83d4a2984b8ed5ced2025cbad65cec99dfc0d14a4fd52e71b24063ad51afcd8da5614d97d566fb9d0006ec020932b88432ebe3
- SSDEEP 49152:9TAnyT3S9tsgX8zEC8ULgCSA/Bkj0RVBXdc2:9TAnyTIOSAjdt
- TLSH T156064B1EFFE44E27E16E563E90314B3D53A5AD3A9A36D60E7404B85EC4B2F028917723
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory