General
- Target 2026-07-11_260994b5c27263a4f9a7c577f5d7b7c3_elex_glassworm_icedid_njrat_stealc_swisyn
- Size 3.5MB
- Sample260711-vec7ysht7t
- SHA256 643ab64b2e075751cac789f6279612f349edc41e601b9d7b5b83af7e9705dbf7
- MD5 260994b5c27263a4f9a7c577f5d7b7c3
- SHA1 1a203db36ef699cf2596b99885278e8734faa875
- SHA512 a7a646c14786118bc2c2f625b3e9fad038e028d6d1ab1ad59ee9ace489c3a91548c5ca921b8cc4d18dbb27630975b9589840c43c1ba8759d677412faa78c790f
- SSDEEP 98304:vqfQJvlN/J8c3ioAnxgUuSiFE5fIIIIIIYIIIIIIIIIYIIIIDIIIIIIIIIIIIIIC:U6JTHDwfIIIIIIYIIIIIIIIIYIIIIDIn
- TLSH T15BF58C03F79540D9C41AC635824BE733AA327C885B61A5DF62D47E223EB2BE06F39715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_260994b5c27263a4f9a7c577f5d7b7c3_elex_glassworm_icedid_njrat_stealc_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_260994b5c27263a4f9a7c577f5d7b7c3_elex_glassworm_icedid_njrat_stealc_swisyn.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_260994b5c27263a4f9a7c577f5d7b7c3_elex_glassworm_icedid_njrat_stealc_swisyn
- Size 3.5MB
- SHA256 643ab64b2e075751cac789f6279612f349edc41e601b9d7b5b83af7e9705dbf7
- MD5 260994b5c27263a4f9a7c577f5d7b7c3
- SHA1 1a203db36ef699cf2596b99885278e8734faa875
- SHA512 a7a646c14786118bc2c2f625b3e9fad038e028d6d1ab1ad59ee9ace489c3a91548c5ca921b8cc4d18dbb27630975b9589840c43c1ba8759d677412faa78c790f
- SSDEEP 98304:vqfQJvlN/J8c3ioAnxgUuSiFE5fIIIIIIYIIIIIIIIIYIIIIDIIIIIIIIIIIIIIC:U6JTHDwfIIIIIIYIIIIIIIIIYIIIIDIn
- TLSH T15BF58C03F79540D9C41AC635824BE733AA327C885B61A5DF62D47E223EB2BE06F39715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory