General
- Target 2026-07-06_e0c53899f32445c167b2c1a977c9f508_elex_glassworm_icedid_njrat_swisyn
- Size 527KB
- Sample260706-v4htqsat2v
- SHA256 5884110c9805e905de888c84f96cd3e4f3619b12d1bf78a14e20ff3892fbeb83
- MD5 e0c53899f32445c167b2c1a977c9f508
- SHA1 963073ccc6c9bfac3db8905af0f87c84912d990a
- SHA512 65d1eb43f78e0f2ea4550e897fc28620c06881dadd19d072a7dd78a5a9c4b8d5cb69edfa4252e04b1367f3b96585fb4d01f589e8d3240f3a3887855afcd3a4f1
- SSDEEP 6144:UsLqdufVUNDakXAYdg6a5DNavxu7Dh59EhqT31H7jk9+nUCxVEK3qCQ9:PFUNDakw4fa5JavxuNKq71bjk0/Q9
- TLSH T19DB48E17F64404F8D066C2B48A66D612FA71BC160BB0ED5F13A997213E32B927F79F06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_e0c53899f32445c167b2c1a977c9f508_elex_glassworm_icedid_njrat_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_e0c53899f32445c167b2c1a977c9f508_elex_glassworm_icedid_njrat_swisyn.exe
Resource
win11ltsc2024-20260629-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_e0c53899f32445c167b2c1a977c9f508_elex_glassworm_icedid_njrat_swisyn
- Size 527KB
- SHA256 5884110c9805e905de888c84f96cd3e4f3619b12d1bf78a14e20ff3892fbeb83
- MD5 e0c53899f32445c167b2c1a977c9f508
- SHA1 963073ccc6c9bfac3db8905af0f87c84912d990a
- SHA512 65d1eb43f78e0f2ea4550e897fc28620c06881dadd19d072a7dd78a5a9c4b8d5cb69edfa4252e04b1367f3b96585fb4d01f589e8d3240f3a3887855afcd3a4f1
- SSDEEP 6144:UsLqdufVUNDakXAYdg6a5DNavxu7Dh59EhqT31H7jk9+nUCxVEK3qCQ9:PFUNDakw4fa5JavxuNKq71bjk0/Q9
- TLSH T19DB48E17F64404F8D066C2B48A66D612FA71BC160BB0ED5F13A997213E32B927F79F06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory