General
- Target 2026-07-07_5880e66380ddfd5acea83d74f5bee9f4_elex_glassworm_icedid_njrat_stealc_swisyn
- Size 3.5MB
- Sample260707-wvhytab19n
- SHA256 892d280562ac9e2268a691a90e19ded0c92c5f2734748c24a4a4a6cf4d2d6021
- MD5 5880e66380ddfd5acea83d74f5bee9f4
- SHA1 842e03e86cef33d7376219aa4cc065c9552cafbe
- SHA512 d1510bf6ba4532881aa20a00fe9e65c24ed51536d415d8274667c63e240aa8814afcd69387476238406896603d363c86278e2ad91dc16f3e985057a40b2c65c6
- SSDEEP 98304:oqfQJvlN/J8c3ioAnxgUuSiFE5fIIIIIIYIIIIIIIIIYIIIIDIIIIIIIIIIIIIIT:h6JTHDwfIIIIIIYIIIIIIIIIYIIIIDIG
- TLSH T1DEF58C03F79540E9C41AC6358257E733AA327C881B61A5DF62D47E263FB2AE06F39705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_5880e66380ddfd5acea83d74f5bee9f4_elex_glassworm_icedid_njrat_stealc_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_5880e66380ddfd5acea83d74f5bee9f4_elex_glassworm_icedid_njrat_stealc_swisyn.exe
Resource
win11ltsc2024-20260706-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_5880e66380ddfd5acea83d74f5bee9f4_elex_glassworm_icedid_njrat_stealc_swisyn
- Size 3.5MB
- SHA256 892d280562ac9e2268a691a90e19ded0c92c5f2734748c24a4a4a6cf4d2d6021
- MD5 5880e66380ddfd5acea83d74f5bee9f4
- SHA1 842e03e86cef33d7376219aa4cc065c9552cafbe
- SHA512 d1510bf6ba4532881aa20a00fe9e65c24ed51536d415d8274667c63e240aa8814afcd69387476238406896603d363c86278e2ad91dc16f3e985057a40b2c65c6
- SSDEEP 98304:oqfQJvlN/J8c3ioAnxgUuSiFE5fIIIIIIYIIIIIIIIIYIIIIDIIIIIIIIIIIIIIT:h6JTHDwfIIIIIIYIIIIIIIIIYIIIIDIG
- TLSH T1DEF58C03F79540E9C41AC6358257E733AA327C881B61A5DF62D47E263FB2AE06F39705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory