General
- Target 2026-07-24_5c25f966a4bda375f526ebacb475dab0_glassworm_icedid_njrat_ryuk_vidar
- Size 1.7MB
- Sample260724-ws439saj4s
- SHA256 3138805b8c88adf0a7e5ce53956f1177638690afa5cff04297fe6e339062b20d
- MD5 5c25f966a4bda375f526ebacb475dab0
- SHA1 532c84d9f33f1535bb23166f7b6fdd5998d2ba46
- SHA512 f030e5c6c73aafa6e1c5f006cce226be6299cf2b21af3a1b692d7e40c444394cc999cab9c9580291ef0abf71f2e51a1ebebad986a47c6ff79984acf74cacc211
- SSDEEP 12288:7hs7dZNRqJpPAwx1xzwPGCoMhqSJYT5Oi3nLICy1asXAq14KH/G5fzn5bDesMr6:7iWKPGC1qDpnLQ1VAq1Nfwrn0sS6
- TLSH T16C85E197A29444F4E06AC2388A53A512EA71F85507B0F7AF03E5D7322E33B915F3EB15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-24_5c25f966a4bda375f526ebacb475dab0_glassworm_icedid_njrat_ryuk_vidar.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-24_5c25f966a4bda375f526ebacb475dab0_glassworm_icedid_njrat_ryuk_vidar
- Size 1.7MB
- SHA256 3138805b8c88adf0a7e5ce53956f1177638690afa5cff04297fe6e339062b20d
- MD5 5c25f966a4bda375f526ebacb475dab0
- SHA1 532c84d9f33f1535bb23166f7b6fdd5998d2ba46
- SHA512 f030e5c6c73aafa6e1c5f006cce226be6299cf2b21af3a1b692d7e40c444394cc999cab9c9580291ef0abf71f2e51a1ebebad986a47c6ff79984acf74cacc211
- SSDEEP 12288:7hs7dZNRqJpPAwx1xzwPGCoMhqSJYT5Oi3nLICy1asXAq14KH/G5fzn5bDesMr6:7iWKPGC1qDpnLQ1VAq1Nfwrn0sS6
- TLSH T16C85E197A29444F4E06AC2388A53A512EA71F85507B0F7AF03E5D7322E33B915F3EB15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory