General
- Target 2026-07-12_8a8b3956ee14617a1733b6dc71a8073e_glassworm_icedid_njrat_ryuk
- Size 53.3MB
- Sample260712-kymwdsfs3j
- SHA256 33a8c8c390986dc271ffd68705a1916d8163d2d04f62558505eae7981b312e99
- MD5 8a8b3956ee14617a1733b6dc71a8073e
- SHA1 3a7dfadc900bc969c4a4180e811e8fa5ddb0a953
- SHA512 24935179684c84b8397e9ab19d237295df5aded5b9c20070a34c12becafaaf4fee53d86de482acf6457afce824f67ed43063a545b4bbaf236dd27efc36499818
- SSDEEP 1572864:r4wZyJvg+n8bH2oyk7ylfQhSCU/+tPOIc:3Z4ba2k7y+hSC++t3
- TLSH T16DC7336AAB9004D4E864B63351F3B92343F5376E461EC16FC4A266FE4336DDC9E38126
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-07-12_8a8b3956ee14617a1733b6dc71a8073e_glassworm_icedid_njrat_ryuk.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_8a8b3956ee14617a1733b6dc71a8073e_glassworm_icedid_njrat_ryuk.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_8a8b3956ee14617a1733b6dc71a8073e_glassworm_icedid_njrat_ryuk
- Size 53.3MB
- SHA256 33a8c8c390986dc271ffd68705a1916d8163d2d04f62558505eae7981b312e99
- MD5 8a8b3956ee14617a1733b6dc71a8073e
- SHA1 3a7dfadc900bc969c4a4180e811e8fa5ddb0a953
- SHA512 24935179684c84b8397e9ab19d237295df5aded5b9c20070a34c12becafaaf4fee53d86de482acf6457afce824f67ed43063a545b4bbaf236dd27efc36499818
- SSDEEP 1572864:r4wZyJvg+n8bH2oyk7ylfQhSCU/+tPOIc:3Z4ba2k7y+hSC++t3
- TLSH T16DC7336AAB9004D4E864B63351F3B92343F5376E461EC16FC4A266FE4336DDC9E38126
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Loads dropped DLL
Suspicious use of NtSetInformationThreadHideFromDebugger