General
- Target 2026-07-27_c1a466ef093f311de16b2f0d943a8dca_glassworm_icedid_njrat_ryuk
- Size 1.8MB
- Sample260727-xdjdpack4t
- SHA256 6b1b3d8c1a433391d6aa7c8a75526ec34a8c852d0848ea878fc8e17a647f44f4
- MD5 c1a466ef093f311de16b2f0d943a8dca
- SHA1 3d4f6a88f73030940b4ceeab75b387fe8147c3d7
- SHA512 16205bae7d419ba08a3e44af8574d152bf1a72cb3b1177ab88dcdfba3a94f4eccb1555af9659471aa7e23de231677116e501ddd60d524ab829943a7041f77d27
- SSDEEP 24576:Y0mwBq7Zk0Of5TpmwLt3iRu/ocxwKDJKIe05Qws:Y0mHhOrmwx3lwcx/Kt0F
- TLSH T13995E107F29408F8D05EC279CB669112EA71F8950B70E69F13AD96622E33BA15F3DF11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_c1a466ef093f311de16b2f0d943a8dca_glassworm_icedid_njrat_ryuk.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_c1a466ef093f311de16b2f0d943a8dca_glassworm_icedid_njrat_ryuk
- Size 1.8MB
- SHA256 6b1b3d8c1a433391d6aa7c8a75526ec34a8c852d0848ea878fc8e17a647f44f4
- MD5 c1a466ef093f311de16b2f0d943a8dca
- SHA1 3d4f6a88f73030940b4ceeab75b387fe8147c3d7
- SHA512 16205bae7d419ba08a3e44af8574d152bf1a72cb3b1177ab88dcdfba3a94f4eccb1555af9659471aa7e23de231677116e501ddd60d524ab829943a7041f77d27
- SSDEEP 24576:Y0mwBq7Zk0Of5TpmwLt3iRu/ocxwKDJKIe05Qws:Y0mHhOrmwx3lwcx/Kt0F
- TLSH T13995E107F29408F8D05EC279CB669112EA71F8950B70E69F13AD96622E33BA15F3DF11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory