General
- Target 2026-07-07_adaa035f8f7a861905b8d7d2c7dee67f_elex_glassworm_icedid_njrat
- Size 5.8MB
- Sample260707-werk1sa18v
- SHA256 3adde78d670170d143fc1347e85f0ff55afd1c6709b4c10765b9560af0650598
- MD5 adaa035f8f7a861905b8d7d2c7dee67f
- SHA1 f031a28049ac2834472e0671cc729d796a458148
- SHA512 29bcad43f36adacaa5f869706eeb2b490cc1c447678f355baaef9519d598f80c5dbed18a0f154b912cdcff52639b8c2e5da865295f50f01ba7ba48eb4727c262
- SSDEEP 98304:s4WHz4Uuk4t8yq2wG5/hn/JnLrHp/qKm2/Sb/gqAZj+UzKb3HtF:cHz4U542RwFRrRb/G8+H
- TLSH T1D8568B13EBC21AD5F3890536DE144600D729F95996EB0361302C62DDEFA7383BF65A2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-07-07_adaa035f8f7a861905b8d7d2c7dee67f_elex_glassworm_icedid_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_adaa035f8f7a861905b8d7d2c7dee67f_elex_glassworm_icedid_njrat.exe
Resource
win11ltsc2024-20260706-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_adaa035f8f7a861905b8d7d2c7dee67f_elex_glassworm_icedid_njrat
- Size 5.8MB
- SHA256 3adde78d670170d143fc1347e85f0ff55afd1c6709b4c10765b9560af0650598
- MD5 adaa035f8f7a861905b8d7d2c7dee67f
- SHA1 f031a28049ac2834472e0671cc729d796a458148
- SHA512 29bcad43f36adacaa5f869706eeb2b490cc1c447678f355baaef9519d598f80c5dbed18a0f154b912cdcff52639b8c2e5da865295f50f01ba7ba48eb4727c262
- SSDEEP 98304:s4WHz4Uuk4t8yq2wG5/hn/JnLrHp/qKm2/Sb/gqAZj+UzKb3HtF:cHz4U542RwFRrRb/G8+H
- TLSH T1D8568B13EBC21AD5F3890536DE144600D729F95996EB0361302C62DDEFA7383BF65A2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.