General
- Target 2026-06-30_6f226fb5031e45d9aed1c3b4bc65b703_elex_glassworm_icedid_njrat
- Size 7.9MB
- Sample260701-e27r3sgs8z
- SHA256 97d4aa856a0f2d50c6e1488993da6d7f5ac13632aae5bdc47e5484f7431103ed
- MD5 6f226fb5031e45d9aed1c3b4bc65b703
- SHA1 81306e3b1ae2578fda05ad793b801c0b365fd096
- SHA512 f6ef3e2b9f3e56b6d1b8c63632fa3545a75cd37a721654d5a822f7121e30963203d5feb4f32f1bf03943f53e2e1b29198f646be2fb0f64f5c3aa22bf7b4b5a91
- SSDEEP 196608:NjJ1GKUxqnY4fcYvbnLD9dppqmPgvi/Mn/R15fmmpLq:RJEKUxqnBRbntdhYv4Mn/R1Ftm
- TLSH T1F186F1738AA06F85F833413413F68562CA2E3C3E5260471DB75CFA9B3BB3596145EA1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-30_6f226fb5031e45d9aed1c3b4bc65b703_elex_glassworm_icedid_njrat.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_6f226fb5031e45d9aed1c3b4bc65b703_elex_glassworm_icedid_njrat.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_6f226fb5031e45d9aed1c3b4bc65b703_elex_glassworm_icedid_njrat
- Size 7.9MB
- SHA256 97d4aa856a0f2d50c6e1488993da6d7f5ac13632aae5bdc47e5484f7431103ed
- MD5 6f226fb5031e45d9aed1c3b4bc65b703
- SHA1 81306e3b1ae2578fda05ad793b801c0b365fd096
- SHA512 f6ef3e2b9f3e56b6d1b8c63632fa3545a75cd37a721654d5a822f7121e30963203d5feb4f32f1bf03943f53e2e1b29198f646be2fb0f64f5c3aa22bf7b4b5a91
- SSDEEP 196608:NjJ1GKUxqnY4fcYvbnLD9dppqmPgvi/Mn/R15fmmpLq:RJEKUxqnBRbntdhYv4Mn/R1Ftm
- TLSH T1F186F1738AA06F85F833413413F68562CA2E3C3E5260471DB75CFA9B3BB3596145EA1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE