General
- Target 2026-07-05_dc42d86c7c13664194eda3ecd32ecb8e_glassworm_icedid_njrat
- Size 1.9MB
- Sample260705-bf62wafy3v
- SHA256 f955cc799e5e9c2b49e096ef647d473cce01a488ae767da9dafc51d915b113f1
- MD5 dc42d86c7c13664194eda3ecd32ecb8e
- SHA1 d171913971bb9fa6e0e41c46901c26ed9c47d1af
- SHA512 afb91e225abd7c3d214c4298f4d935e8392ad0408c931f484c401743f9a16f6b7549a1b7c640b25c01a3257aef2411a0d5974cfe64bf8d5b3bccbcbe701589a5
- SSDEEP 24576:sf4RpknVIEM+TynERzhwExMEswIYzAwgLhUJ6y8bgMLZ//EHJKyl96Uau79BKAWy:q4RpknVISyEoEswpzAwAIy+
- TLSH T1CD957ECA3F86BD24CB33D3F4B5255801C6727C2409786EEB5EE6C5ADA3C2AD06275361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-05_dc42d86c7c13664194eda3ecd32ecb8e_glassworm_icedid_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_dc42d86c7c13664194eda3ecd32ecb8e_glassworm_icedid_njrat.exe
Resource
win11ltsc2024-20260629-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_dc42d86c7c13664194eda3ecd32ecb8e_glassworm_icedid_njrat
- Size 1.9MB
- SHA256 f955cc799e5e9c2b49e096ef647d473cce01a488ae767da9dafc51d915b113f1
- MD5 dc42d86c7c13664194eda3ecd32ecb8e
- SHA1 d171913971bb9fa6e0e41c46901c26ed9c47d1af
- SHA512 afb91e225abd7c3d214c4298f4d935e8392ad0408c931f484c401743f9a16f6b7549a1b7c640b25c01a3257aef2411a0d5974cfe64bf8d5b3bccbcbe701589a5
- SSDEEP 24576:sf4RpknVIEM+TynERzhwExMEswIYzAwgLhUJ6y8bgMLZ//EHJKyl96Uau79BKAWy:q4RpknVISyEoEswpzAwAIy+
- TLSH T1CD957ECA3F86BD24CB33D3F4B5255801C6727C2409786EEB5EE6C5ADA3C2AD06275361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects AutoHotKey binaries acting as second stage droppers
-
Detects executables containing URLs to raw contents of a Github gist