General
- Target 2026-08-04_64739fa0b7316add664a923c05585d0b_glassworm_icedid_njrat
- Size 11.7MB
- Sample260804-htlreshq6w
- SHA256 ea1e027fcd911d5533ee835070b8aa44aa84a34adcd85d71f43e485fc822b820
- MD5 64739fa0b7316add664a923c05585d0b
- SHA1 4088dc1a3d91e2199d871bc2eeac03418da45fb2
- SHA512 cd859c0a133ba6f45069bb69879a58a4a2f346a613c21e92ade4b0a758363be467b5d2e742d53437ef8fdafcb2d5ab7e18eac8a9c53417b1744ee418672e4e27
- SSDEEP 98304:TKETtoj3FI6XomceAPRHB7YAov0xn+QW0WHkZslgJTIZ5Bgp:mCSjFIWXAD0QW0vsT6p
- TLSH T185C67D77229C01D8E0BBC07D8BCB9E93DBB2340903719AEF05A045565E5BEE95F3A712
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_64739fa0b7316add664a923c05585d0b_glassworm_icedid_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_64739fa0b7316add664a923c05585d0b_glassworm_icedid_njrat
- Size 11.7MB
- SHA256 ea1e027fcd911d5533ee835070b8aa44aa84a34adcd85d71f43e485fc822b820
- MD5 64739fa0b7316add664a923c05585d0b
- SHA1 4088dc1a3d91e2199d871bc2eeac03418da45fb2
- SHA512 cd859c0a133ba6f45069bb69879a58a4a2f346a613c21e92ade4b0a758363be467b5d2e742d53437ef8fdafcb2d5ab7e18eac8a9c53417b1744ee418672e4e27
- SSDEEP 98304:TKETtoj3FI6XomceAPRHB7YAov0xn+QW0WHkZslgJTIZ5Bgp:mCSjFIWXAD0QW0vsT6p
- TLSH T185C67D77229C01D8E0BBC07D8BCB9E93DBB2340903719AEF05A045565E5BEE95F3A712
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1