General
- Target 2026-07-20_4251a818d67b27ce5190d41fa3f7d13c_elex_glassworm_icedid_njrat_vidar
- Size 7.7MB
- Sample260720-dr6llagt6s
- SHA256 aaea99e408224ca54c5c2c5cd99cba88abf98074c2bfd7dc87b3992d9ac4c578
- MD5 4251a818d67b27ce5190d41fa3f7d13c
- SHA1 beeabc8a1e3d87e65e8bc85c2e488dd7dc37a01b
- SHA512 66d01f7b638544fe6c72b4481dea1fde6cf6373ea0d102ac1a4f64d25a602e3376663bba09918b059e9e34c84bceb86d9f5ae215f252381338ccaa7910e83219
- SSDEEP 98304:B0nAAYEp4h0u1MbQ9yDAD7KjjqkusjmqMh3:WNFu1tIDewjqkjiqMN
- TLSH T1C2867D39DBA4C1E5F9ABD878A97BC672FA717A110833530B89E1C61EAF335524D18331
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_4251a818d67b27ce5190d41fa3f7d13c_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_4251a818d67b27ce5190d41fa3f7d13c_elex_glassworm_icedid_njrat_vidar
- Size 7.7MB
- SHA256 aaea99e408224ca54c5c2c5cd99cba88abf98074c2bfd7dc87b3992d9ac4c578
- MD5 4251a818d67b27ce5190d41fa3f7d13c
- SHA1 beeabc8a1e3d87e65e8bc85c2e488dd7dc37a01b
- SHA512 66d01f7b638544fe6c72b4481dea1fde6cf6373ea0d102ac1a4f64d25a602e3376663bba09918b059e9e34c84bceb86d9f5ae215f252381338ccaa7910e83219
- SSDEEP 98304:B0nAAYEp4h0u1MbQ9yDAD7KjjqkusjmqMh3:WNFu1tIDewjqkjiqMN
- TLSH T1C2867D39DBA4C1E5F9ABD878A97BC672FA717A110833530B89E1C61EAF335524D18331
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE