General
- Target 2026-07-06_826f58579d730ed5e4ef165bb0399b2e_elex_glassworm_icedid_njrat_swisyn
- Size 804KB
- Sample260706-wl6zaaay5w
- SHA256 a59579a2de756d78c231dd646b828ff46cbc484ad7a3e991562e93d62207e14a
- MD5 826f58579d730ed5e4ef165bb0399b2e
- SHA1 0baccdead1f679d599abf2d56250a41e9ebe8ed7
- SHA512 6b734c93d3670751d084ca41bb5bf215b90d1aa833c382815d0ba49e592231a45e292ee0f73214acea5d61919befaeb12e0947dc7532d99913f277251cd9f76c
- SSDEEP 12288:PFUNDakr19+bycEgDhMpkESYvXZrW6Fh8pCARDlD0VwZhACtZQg:PFOakrObycn9MpkGJrWokRDOVwZhAu
- TLSH T1D1059E13B79000F9D02AC276CA669122FAB2FC550B74BE5F23A057113E33A956F7DB16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_826f58579d730ed5e4ef165bb0399b2e_elex_glassworm_icedid_njrat_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_826f58579d730ed5e4ef165bb0399b2e_elex_glassworm_icedid_njrat_swisyn.exe
Resource
win11ltsc2024-20260630-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_826f58579d730ed5e4ef165bb0399b2e_elex_glassworm_icedid_njrat_swisyn
- Size 804KB
- SHA256 a59579a2de756d78c231dd646b828ff46cbc484ad7a3e991562e93d62207e14a
- MD5 826f58579d730ed5e4ef165bb0399b2e
- SHA1 0baccdead1f679d599abf2d56250a41e9ebe8ed7
- SHA512 6b734c93d3670751d084ca41bb5bf215b90d1aa833c382815d0ba49e592231a45e292ee0f73214acea5d61919befaeb12e0947dc7532d99913f277251cd9f76c
- SSDEEP 12288:PFUNDakr19+bycEgDhMpkESYvXZrW6Fh8pCARDlD0VwZhACtZQg:PFOakrObycn9MpkGJrWokRDOVwZhAu
- TLSH T1D1059E13B79000F9D02AC276CA669122FAB2FC550B74BE5F23A057113E33A956F7DB16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory