General
- Target 2026-07-21_2e6ff89ce4acb06fc1f344e28b4dd4c7_elex_glassworm_icedid_njrat_vidar
- Size 4.4MB
- Sample260721-v5avhsdb66
- SHA256 7e28f706fab6c6bc3ddf64a86ef3c9035ae5582c746da06c15ec80898ea5eccd
- MD5 2e6ff89ce4acb06fc1f344e28b4dd4c7
- SHA1 81759f7444ecd7f3325fad95b2304f7748b7c289
- SHA512 9029bc928cfab3dc39d0ac1c9e34cce049bb9fbde31577f9f86ea189087bfce79ed750e9c50996b60d3b0db3b4a504c8bfaa220e78b93b1c4e2c48c27d011e38
- SSDEEP 49152:fdRba8fD8qinfMSKJXIUQREV1QOTu1U5ai25zYo5UC9RhuCTFKlaxV5dgbTJJBSb:c/IJsiC5sop7cTJI
- TLSH T15E264A656BF884F5E1ABD1388976CAB1F77678120D31EB4F0251CA1F2F33A904D29726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_2e6ff89ce4acb06fc1f344e28b4dd4c7_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-21_2e6ff89ce4acb06fc1f344e28b4dd4c7_elex_glassworm_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_2e6ff89ce4acb06fc1f344e28b4dd4c7_elex_glassworm_icedid_njrat_vidar
- Size 4.4MB
- SHA256 7e28f706fab6c6bc3ddf64a86ef3c9035ae5582c746da06c15ec80898ea5eccd
- MD5 2e6ff89ce4acb06fc1f344e28b4dd4c7
- SHA1 81759f7444ecd7f3325fad95b2304f7748b7c289
- SHA512 9029bc928cfab3dc39d0ac1c9e34cce049bb9fbde31577f9f86ea189087bfce79ed750e9c50996b60d3b0db3b4a504c8bfaa220e78b93b1c4e2c48c27d011e38
- SSDEEP 49152:fdRba8fD8qinfMSKJXIUQREV1QOTu1U5ai25zYo5UC9RhuCTFKlaxV5dgbTJJBSb:c/IJsiC5sop7cTJI
- TLSH T15E264A656BF884F5E1ABD1388976CAB1F77678120D31EB4F0251CA1F2F33A904D29726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.