General
- Target 2026-07-18_0ea6cfd56255aa978357ec6ec76c505a_elex_glassworm_icedid_njrat_vidar
- Size 7.7MB
- Sample260718-kseb3aev5q
- SHA256 94e3a3ba61bcc943746d0adaeaa41ecfafe288cf3f53e6be5f520138ba6235b7
- MD5 0ea6cfd56255aa978357ec6ec76c505a
- SHA1 1ace531e07448b2c7b25a730696bcb017e681da9
- SHA512 b2f20d303589237c3cd61c2ffed374b30a7267abb764e219c0fff63160284ae7a133091cb9f9ea8bb7a448e50e70cc8b8578492d2cdb69cb28670179f6f5fe11
- SSDEEP 98304:50nAAYEpFhVu1MbQ9yDAD7KjjqkusjmqMh5:eNvu1tIDewjqkjiqML
- TLSH T19B867D39DBA4C1E5F9ABD878A97BC672FA717A110833530B89E1C61EAF335524D18331
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_0ea6cfd56255aa978357ec6ec76c505a_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_0ea6cfd56255aa978357ec6ec76c505a_elex_glassworm_icedid_njrat_vidar
- Size 7.7MB
- SHA256 94e3a3ba61bcc943746d0adaeaa41ecfafe288cf3f53e6be5f520138ba6235b7
- MD5 0ea6cfd56255aa978357ec6ec76c505a
- SHA1 1ace531e07448b2c7b25a730696bcb017e681da9
- SHA512 b2f20d303589237c3cd61c2ffed374b30a7267abb764e219c0fff63160284ae7a133091cb9f9ea8bb7a448e50e70cc8b8578492d2cdb69cb28670179f6f5fe11
- SSDEEP 98304:50nAAYEpFhVu1MbQ9yDAD7KjjqkusjmqMh5:eNvu1tIDewjqkjiqML
- TLSH T19B867D39DBA4C1E5F9ABD878A97BC672FA717A110833530B89E1C61EAF335524D18331
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE