General
- Target 2026-07-20_84ac0d71e44c5477b46d1c485a4fbf44_glassworm_icedid_njrat_ryuk
- Size 1.5MB
- Sample260720-dd46lsfy9y
- SHA256 8b2972c5e4402344cf2a7a5f09b63c61a9f9557d9c5e73ae1e112775941e7289
- MD5 84ac0d71e44c5477b46d1c485a4fbf44
- SHA1 d449b29b233c5b111058e4b1b9f18ee1e074999e
- SHA512 20e60ced1cd5177b0165cc20898c2b1de874a907621d3b081ff916ea5fb1c26b2c6c016ec63f5ee619a7292aa12ddc5d7b5fdf7423da7b55343faa20e6283b38
- SSDEEP 49152:CLhFoJJYSSuisEyGKCpllUU9eJwOCCNM:CeSuhNCpllUU9eJw5Cy
- TLSH T1A375C09AE7B511F4C8B6C0388A532227F9B1B855473497DB86948B5A2F32FF0973E701
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_84ac0d71e44c5477b46d1c485a4fbf44_glassworm_icedid_njrat_ryuk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_84ac0d71e44c5477b46d1c485a4fbf44_glassworm_icedid_njrat_ryuk.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_84ac0d71e44c5477b46d1c485a4fbf44_glassworm_icedid_njrat_ryuk
- Size 1.5MB
- SHA256 8b2972c5e4402344cf2a7a5f09b63c61a9f9557d9c5e73ae1e112775941e7289
- MD5 84ac0d71e44c5477b46d1c485a4fbf44
- SHA1 d449b29b233c5b111058e4b1b9f18ee1e074999e
- SHA512 20e60ced1cd5177b0165cc20898c2b1de874a907621d3b081ff916ea5fb1c26b2c6c016ec63f5ee619a7292aa12ddc5d7b5fdf7423da7b55343faa20e6283b38
- SSDEEP 49152:CLhFoJJYSSuisEyGKCpllUU9eJwOCCNM:CeSuhNCpllUU9eJw5Cy
- TLSH T1A375C09AE7B511F4C8B6C0388A532227F9B1B855473497DB86948B5A2F32FF0973E701
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory