General
- Target 2026-07-14_cfe36f1f795b176880d7fd5a6346d1d6_glassworm_icedid_mespinoza_njrat_ryuk
- Size 69.3MB
- Sample260714-m6pfasbs4m
- SHA256 f460b6177921a6da9f78a0608376042013cb27919053effea4d96da8896d4d74
- MD5 cfe36f1f795b176880d7fd5a6346d1d6
- SHA1 0545cddda53d920dd8afef2c1548cba691140a5e
- SHA512 cf2fcde7753d8fec8f1271ae704b69d479e4658a0e4ddd6a269a207b4b762fc84d6cbbf2845db7a7fb7262a395271e31ae4efece91d6cfd56263d28791e6367c
- SSDEEP 196608:ActgISALtjfxK2FeRiJ2id8pDIr5PkpiT7udfhJsB2DGdYrTP:QALtTgIdHr5udZ28BfP
- TLSH T1DEF70133A3B511E4D6B6D13885A79607EFB1B84707309ADF61985A521F33AF06E7B320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_cfe36f1f795b176880d7fd5a6346d1d6_glassworm_icedid_mespinoza_njrat_ryuk.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_cfe36f1f795b176880d7fd5a6346d1d6_glassworm_icedid_mespinoza_njrat_ryuk.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_cfe36f1f795b176880d7fd5a6346d1d6_glassworm_icedid_mespinoza_njrat_ryuk
- Size 69.3MB
- SHA256 f460b6177921a6da9f78a0608376042013cb27919053effea4d96da8896d4d74
- MD5 cfe36f1f795b176880d7fd5a6346d1d6
- SHA1 0545cddda53d920dd8afef2c1548cba691140a5e
- SHA512 cf2fcde7753d8fec8f1271ae704b69d479e4658a0e4ddd6a269a207b4b762fc84d6cbbf2845db7a7fb7262a395271e31ae4efece91d6cfd56263d28791e6367c
- SSDEEP 196608:ActgISALtjfxK2FeRiJ2id8pDIr5PkpiT7udfhJsB2DGdYrTP:QALtTgIdHr5udZ28BfP
- TLSH T1DEF70133A3B511E4D6B6D13885A79607EFB1B84707309ADF61985A521F33AF06E7B320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.