General
- Target 2026-06-30_2b8989f5aaff515b06efc784149fde15_glassworm_icedid_njrat
- Size 7.1MB
- Sample260630-3wlvesb151
- SHA256 ae21138e5f0429b5a1d5ff417cb532ccb9cce0fe8acb120445616b8e516d8759
- MD5 2b8989f5aaff515b06efc784149fde15
- SHA1 9a9c13a96df638c05e4b49870140defce4e77e12
- SHA512 69d0487fec6e8ccc7b05e06b9bf56d131dd1ae3213c52ba3ce29ef47fed966c5b16c610e7e4faad075540a53318112b713ce94d26a41186417544d95f55db1b3
- SSDEEP 49152:dr7EXclCofH87AAgbUPFobthV2/qt0p8KQzhABu9YU1ZajyIxYFRmF/jUso5Fwn2:aUcsA1QhV27D2aPgso5GZwGFvI+MZY
- TLSH T16E767C1A329911C4E17B817DC9878B4AD6727C110B3397CB09A4E39D9F33ADB4D7AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_2b8989f5aaff515b06efc784149fde15_glassworm_icedid_njrat.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_2b8989f5aaff515b06efc784149fde15_glassworm_icedid_njrat.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_2b8989f5aaff515b06efc784149fde15_glassworm_icedid_njrat
- Size 7.1MB
- SHA256 ae21138e5f0429b5a1d5ff417cb532ccb9cce0fe8acb120445616b8e516d8759
- MD5 2b8989f5aaff515b06efc784149fde15
- SHA1 9a9c13a96df638c05e4b49870140defce4e77e12
- SHA512 69d0487fec6e8ccc7b05e06b9bf56d131dd1ae3213c52ba3ce29ef47fed966c5b16c610e7e4faad075540a53318112b713ce94d26a41186417544d95f55db1b3
- SSDEEP 49152:dr7EXclCofH87AAgbUPFobthV2/qt0p8KQzhABu9YU1ZajyIxYFRmF/jUso5Fwn2:aUcsA1QhV27D2aPgso5GZwGFvI+MZY
- TLSH T16E767C1A329911C4E17B817DC9878B4AD6727C110B3397CB09A4E39D9F33ADB4D7AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.