2026-07-27_c1a466ef093f311de16b2f0d943a8dca_glassworm_icedid_njrat_ryuk

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-27_c1a466ef093f311de16b2f0d943a8dca_glassworm_icedid_njrat_ryuk
Size 1.8MB
Sample260727-xdjdpack4t
SHA256 6b1b3d8c1a433391d6aa7c8a75526ec34a8c852d0848ea878fc8e17a647f44f4
MD5 c1a466ef093f311de16b2f0d943a8dca
SHA1 3d4f6a88f73030940b4ceeab75b387fe8147c3d7
SHA512 16205bae7d419ba08a3e44af8574d152bf1a72cb3b1177ab88dcdfba3a94f4eccb1555af9659471aa7e23de231677116e501ddd60d524ab829943a7041f77d27
SSDEEP 24576:Y0mwBq7Zk0Of5TpmwLt3iRu/ocxwKDJKIe05Qws:Y0mHhOrmwx3lwcx/Kt0F
TLSH
T13995E107F29408F8D05EC279CB669112EA71F8950B70E69F13AD96622E33BA15F3DF11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-27_c1a466ef093f311de16b2f0d943a8dca_glassworm_icedid_njrat_ryuk

File Explorer

2026-07-27_c1a466ef093f311de16b2f0d943a8dca_glassworm_icedid_njrat_ryuk

.exe 1.8MB

2026-07-27_c1a466ef093f311de16b2f0d943a8dca_glassworm_icedid_njrat_ryuk

IMPHASH b1bf4a09fc45103318c84f5cd9cf0433
SHA256 6b1b3d8c1a433391d6aa7c8a75526ec34a8c852d0848ea878fc8e17a647f44f4
MD5 c1a466ef093f311de16b2f0d943a8dca
SHA1 3d4f6a88f73030940b4ceeab75b387fe8147c3d7
SHA512 16205bae7d419ba08a3e44af8574d152bf1a72cb3b1177ab88dcdfba3a94f4eccb1555af9659471aa7e23de231677116e501ddd60d524ab829943a7041f77d27
SSDEEP 24576:Y0mwBq7Zk0Of5TpmwLt3iRu/ocxwKDJKIe05Qws:Y0mHhOrmwx3lwcx/Kt0F
TLSH
T13995E107F29408F8D05EC279CB669112EA71F8950B70E69F13AD96622E33BA15F3DF11
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

152164

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

AppendMenuA CheckMenuRadioItem CheckRadioButton CreateMenu CreateWindowExA DialogBoxParamA EnableMenuItem EnableWindow EndDialog GetCapture GetClientRect GetClipboardOwner GetCursorPos GetDesktopWindow GetDlgItem GetDlgItemInt GetDlgItemTextA GetForegroundWindow GetMessageTime GetQueueStatus GetWindowLongPtrA GetWindowRect GetWindowTextA GetWindowTextLengthA IsDlgButtonChecked LoadIconA MapDialogRect MessageBeep MessageBoxA MessageBoxIndirectA MoveWindow PostMessageA SendDlgItemMessageA SendMessageA SetActiveWindow SetDlgItemInt SetDlgItemTextA SetForegroundWindow SetMenu SetWindowLongPtrA SetWindowPos ShowWindow

advapi32

AllocateAndInitializeSid CopySid GetLengthSid RegCloseKey RegCreateKeyA RegOpenKeyA RegQueryValueExA

shell32

ShellExecuteA

comdlg32

GetOpenFileNameA GetSaveFileNameA

kernel32

CloseHandle CompareStringW CreateFileA CreateFileW CreateThread DeleteCriticalSection DeleteFileA EnterCriticalSection ExitProcess FindClose FindFirstFileA FindFirstFileExA FindNextFileA FindResourceA FlushFileBuffers FormatMessageA FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleCP GetConsoleMode GetCurrentDirectoryA GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDateFormatW GetEnvironmentStringsW GetEnvironmentVariableA GetFileType GetLastError GetLocalTime GetModuleFileNameA GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetProcessTimes GetStartupInfoW GetStdHandle GetStringTypeW GetSystemDirectoryA GetSystemTimeAsFileTime GetTempPathA GetThreadTimes GetTimeFormatW GetTimeZoneInformation GetWindowsDirectoryA GlobalMemoryStatus HeapAlloc HeapFree HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage LCMapStringW LeaveCriticalSection LoadLibraryA LoadLibraryExW LoadResource LocalAlloc LocalFree LockResource MultiByteToWideChar OpenProcess OutputDebugStringW QueryPerformanceCounter RaiseException ReadConsoleW ReadFile RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetCurrentDirectoryA SetEndOfFile SetEnvironmentVariableA SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter SizeofResource TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter WaitForSingleObjectEx WideCharToMultiByte WriteConsoleW WriteFile

Name

.text

Size

269KB

Virtual Size

268KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

80KB

Virtual Size

80KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.00cfg

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

168B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-27_c1a466ef093f311de16b2f0d943a8dca_glassworm_icedid_njrat_ryuk

user32

advapi32

shell32

comdlg32

kernel32

generic