General
- Target 2026-07-28_6129a0106544c1c7f5747ca00c4bf1eb_glassworm_icedid_njrat_ryuk
- Size 1.2MB
- Sample260728-g54wpsff43
- SHA256 6ed7b405e307b5658ceea6b5be7e6af97cd633437260805ee22e85d380ef2094
- MD5 6129a0106544c1c7f5747ca00c4bf1eb
- SHA1 9ab962121a5c9cb5d0894f120a9843854d327bce
- SHA512 7afe372cd8adfbede4c06c7ab98d7f50a62c625d5a408bf27287b4a7bcb707d80fef4ba9d48d21ac6912b631dc6d5912c0fcd95cddd85f18a7d03207f3e93a74
- SSDEEP 24576:g2AoRP0A4RBajzrxTqB0Yck0LZmmN8f5TpmwLt3iRu/ocxwKDJKIe05Qws:g2AohYBajzrx+XcN8rmwx3lwcx/Kt0F
- TLSH T1CA45D117B39400F8D06EC27ACB668112EBF1F8550A35BA9F13A457252F37A985F3DB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_6129a0106544c1c7f5747ca00c4bf1eb_glassworm_icedid_njrat_ryuk.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_6129a0106544c1c7f5747ca00c4bf1eb_glassworm_icedid_njrat_ryuk
- Size 1.2MB
- SHA256 6ed7b405e307b5658ceea6b5be7e6af97cd633437260805ee22e85d380ef2094
- MD5 6129a0106544c1c7f5747ca00c4bf1eb
- SHA1 9ab962121a5c9cb5d0894f120a9843854d327bce
- SHA512 7afe372cd8adfbede4c06c7ab98d7f50a62c625d5a408bf27287b4a7bcb707d80fef4ba9d48d21ac6912b631dc6d5912c0fcd95cddd85f18a7d03207f3e93a74
- SSDEEP 24576:g2AoRP0A4RBajzrxTqB0Yck0LZmmN8f5TpmwLt3iRu/ocxwKDJKIe05Qws:g2AohYBajzrx+XcN8rmwx3lwcx/Kt0F
- TLSH T1CA45D117B39400F8D06EC27ACB668112EBF1F8550A35BA9F13A457252F37A985F3DB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory