General
- Target 2026-07-20_16de3a0d1fd728b6601df2d557a7bd1b_elex_glassworm_icedid_njrat_vidar
- Size 7.8MB
- Sample260720-d2cq9sdz4p
- SHA256 3fb590c8a6c53a827bab79e7b34bc403c04d81815a933e49fe6c7a39f49af5b8
- MD5 16de3a0d1fd728b6601df2d557a7bd1b
- SHA1 4d93bdb9e80ab4b70f2937e11bc00bc9188d7e9e
- SHA512 2446261b298afd80a58a44678a2760170055c9d1d6b9df1e36bc2f3f0b8a9eef5351ccb67b5d7d9556ae4fe2b6893b0bafe76f22ebc6c8000d604cc49f52f54e
- SSDEEP 98304:b0nAAYEprzhEu1MbQ9yDAD7KjjqkusjmqMh6:INFyu1tIDewjqkjiqMw
- TLSH T187867D39EBA4C1E5F9ABD878A97BC672FA717A110833530B89D1C61EAF335524D18331
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_16de3a0d1fd728b6601df2d557a7bd1b_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_16de3a0d1fd728b6601df2d557a7bd1b_elex_glassworm_icedid_njrat_vidar
- Size 7.8MB
- SHA256 3fb590c8a6c53a827bab79e7b34bc403c04d81815a933e49fe6c7a39f49af5b8
- MD5 16de3a0d1fd728b6601df2d557a7bd1b
- SHA1 4d93bdb9e80ab4b70f2937e11bc00bc9188d7e9e
- SHA512 2446261b298afd80a58a44678a2760170055c9d1d6b9df1e36bc2f3f0b8a9eef5351ccb67b5d7d9556ae4fe2b6893b0bafe76f22ebc6c8000d604cc49f52f54e
- SSDEEP 98304:b0nAAYEprzhEu1MbQ9yDAD7KjjqkusjmqMh6:INFyu1tIDewjqkjiqMw
- TLSH T187867D39EBA4C1E5F9ABD878A97BC672FA717A110833530B89D1C61EAF335524D18331
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE