General
- Target 2026-07-31_040c643ed6421c0768f2b70c0c80885f_glassworm_icedid_njrat_ryuk
- Size 1.5MB
- Sample260731-d54n6acb37
- SHA256 bdbc2a0a1a2e20dac87517f41b3bc617eb9ea4f646bc3613565806e9b38963bb
- MD5 040c643ed6421c0768f2b70c0c80885f
- SHA1 f0a9d2cce27dfd25696edaa9dab46fdb14f10f37
- SHA512 8ef16cdb1ad485ba93489455569e31198d4a4de9591d34738b72e53d1b16e9dfb0d01cef461466820213e24ff97245079209163975f31fa190cef449d93781fd
- SSDEEP 24576:KLh1gR6oPXP9j3oLOS3/26/sEyGKCplM43zRTTxH2qjYXzGAiGFn4w7z:KLhFoHJYSSuisEyGKCpljFYXLFj
- TLSH T1B175BF5AE7B510F8D4B6C1388A532223F9B1B8594734DBDB46948B5A2F72FF0963E700
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_040c643ed6421c0768f2b70c0c80885f_glassworm_icedid_njrat_ryuk.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_040c643ed6421c0768f2b70c0c80885f_glassworm_icedid_njrat_ryuk.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_040c643ed6421c0768f2b70c0c80885f_glassworm_icedid_njrat_ryuk
- Size 1.5MB
- SHA256 bdbc2a0a1a2e20dac87517f41b3bc617eb9ea4f646bc3613565806e9b38963bb
- MD5 040c643ed6421c0768f2b70c0c80885f
- SHA1 f0a9d2cce27dfd25696edaa9dab46fdb14f10f37
- SHA512 8ef16cdb1ad485ba93489455569e31198d4a4de9591d34738b72e53d1b16e9dfb0d01cef461466820213e24ff97245079209163975f31fa190cef449d93781fd
- SSDEEP 24576:KLh1gR6oPXP9j3oLOS3/26/sEyGKCplM43zRTTxH2qjYXzGAiGFn4w7z:KLhFoHJYSSuisEyGKCpljFYXLFj
- TLSH T1B175BF5AE7B510F8D4B6C1388A532223F9B1B8594734DBDB46948B5A2F72FF0963E700
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1