2026-08-02_9b7b653a3258e6560e2520e1227156c7_amadey_elex_glassworm_icedid_njrat_rhadamanthys_stop_vidar

General

Target
2026-08-02_9b7b653a3258e6560e2520e1227156c7_amadey_elex_glassworm_icedid_njrat_rhadamanthys_stop_vidar
Size 3.4MB
Sample260802-j5pg5aybmb
SHA256 c4387476c64ab674a84d77fa241a840c4c2645b5c2568ba4e00146f245e7c259
MD5 9b7b653a3258e6560e2520e1227156c7
SHA1 ae3ed3dbb9a9ea496f868186b5e8e37673b1e012
SHA512 4530978367ccc2131fa3a16a47666f432f129970cf102d9f811c7935b17c03f30b66d19113fe90616d384f306db4f027652bfea6e296c4fc2e1481dc2a822f16
SSDEEP 49152:96nTg35DMnCIjtAyOLfU1rrNDS5lSUZqhaK6zbfqdloS1qqJtb2IQPji0Aj:y55TNDS5lSUxbjZjo
TLSH
T1AAF55B12F7B483E9D4738175C9E2A66AEA723C510B30D6CB5248A36D5E33BD18D37722
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables packed with ASPack 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_ASPack

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-02_9b7b653a3258e6560e2520e1227156c7_amadey_elex_glassworm_icedid_njrat_rhadamanthys_stop_vidar

2026-08-02_9b7b653a3258e6560e2520e1227156c7_amadey_elex_glassworm_icedid_njrat_rhadamanthys_stop_vidar

.exe 3.4MB

IMPHASH b941ddedcc51e5706d41335adb4e6b2a
SHA256 c4387476c64ab674a84d77fa241a840c4c2645b5c2568ba4e00146f245e7c259
MD5 9b7b653a3258e6560e2520e1227156c7
SHA1 ae3ed3dbb9a9ea496f868186b5e8e37673b1e012
SHA512 4530978367ccc2131fa3a16a47666f432f129970cf102d9f811c7935b17c03f30b66d19113fe90616d384f306db4f027652bfea6e296c4fc2e1481dc2a822f16
SSDEEP 49152:96nTg35DMnCIjtAyOLfU1rrNDS5lSUZqhaK6zbfqdloS1qqJtb2IQPji0Aj:y55TNDS5lSUxbjZjo
TLSH
T1AAF55B12F7B483E9D4738175C9E2A66AEA723C510B30D6CB5248A36D5E33BD18D37722
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths