General
- Target 2026-07-28_1c3ae957f8bb91d37df35d6d11d869ef_elex_glassworm_icedid_njrat_swisyn_wannacry
- Size 19.7MB
- Sample260728-3gneps1sb1
- SHA256 31acbfbe07528740a4f077cb1bdbe208931de12209286f25759c0c74fbf12df3
- MD5 1c3ae957f8bb91d37df35d6d11d869ef
- SHA1 ce01a1b155719103feb8e9c67923ae245f5280ce
- SHA512 a883abc1a25cde302a506abf0e23774a3832c4845f40621408e770aa09e976f23084a8fd52ed960ca9274308b8a39a93b8753bcea1a03a2f33d60ad46d663e7d
- SSDEEP 393216:FKGbK6F/UtIyFVFRZWXvbWQicStul+H/hgihvitBqfUG1t3AYtHCvClv4pKiZ75Q:gjzZWXvbWQicStul+H/hgihvitBqfUGP
- TLSH T18B279D9672F500D8D036E0BECA26945BD7B234540731A7DB0BA1066A5F63FE66CBF360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_1c3ae957f8bb91d37df35d6d11d869ef_elex_glassworm_icedid_njrat_swisyn_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_1c3ae957f8bb91d37df35d6d11d869ef_elex_glassworm_icedid_njrat_swisyn_wannacry.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_1c3ae957f8bb91d37df35d6d11d869ef_elex_glassworm_icedid_njrat_swisyn_wannacry
- Size 19.7MB
- SHA256 31acbfbe07528740a4f077cb1bdbe208931de12209286f25759c0c74fbf12df3
- MD5 1c3ae957f8bb91d37df35d6d11d869ef
- SHA1 ce01a1b155719103feb8e9c67923ae245f5280ce
- SHA512 a883abc1a25cde302a506abf0e23774a3832c4845f40621408e770aa09e976f23084a8fd52ed960ca9274308b8a39a93b8753bcea1a03a2f33d60ad46d663e7d
- SSDEEP 393216:FKGbK6F/UtIyFVFRZWXvbWQicStul+H/hgihvitBqfUG1t3AYtHCvClv4pKiZ75Q:gjzZWXvbWQicStul+H/hgihvitBqfUGP
- TLSH T18B279D9672F500D8D036E0BECA26945BD7B234540731A7DB0BA1066A5F63FE66CBF360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory