General
- Target 2026-08-04_38b086aee3d9a3b9f7ec489f21d548d2_glassworm_icedid_njrat_ryuk
- Size 1.5MB
- Sample260804-jjpwrsfd83
- SHA256 76c7e736d60a305b6386a0185fa0e37d0d6957c161209d4b84aeb5e54d0d9cd7
- MD5 38b086aee3d9a3b9f7ec489f21d548d2
- SHA1 b6fc030f183f8c5054e99ee1217cef2bc9db4138
- SHA512 b8e93eeb19ed7764b9e0844f615cccf805a9247fcfd819a71f64266ac39c0f89b0c5b147fe7b03720e125df3f77a9fe3201b347bf6cfe69bb6199a1eb4aee107
- SSDEEP 24576:zLh1gR6oPZP9j3oLOS3/26/sEyGKCplM4kyh67TbhQyOhcJ+dmHqxgj:zLhFoJJYSSuisEyGKCplTU7mqhH3j
- TLSH T18B75BF9AE7B511F4C4B6D0388A622227F9B1B4254734D7DB86958B5A2F33FF0963E700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_38b086aee3d9a3b9f7ec489f21d548d2_glassworm_icedid_njrat_ryuk.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_38b086aee3d9a3b9f7ec489f21d548d2_glassworm_icedid_njrat_ryuk.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_38b086aee3d9a3b9f7ec489f21d548d2_glassworm_icedid_njrat_ryuk
- Size 1.5MB
- SHA256 76c7e736d60a305b6386a0185fa0e37d0d6957c161209d4b84aeb5e54d0d9cd7
- MD5 38b086aee3d9a3b9f7ec489f21d548d2
- SHA1 b6fc030f183f8c5054e99ee1217cef2bc9db4138
- SHA512 b8e93eeb19ed7764b9e0844f615cccf805a9247fcfd819a71f64266ac39c0f89b0c5b147fe7b03720e125df3f77a9fe3201b347bf6cfe69bb6199a1eb4aee107
- SSDEEP 24576:zLh1gR6oPZP9j3oLOS3/26/sEyGKCplM4kyh67TbhQyOhcJ+dmHqxgj:zLhFoJJYSSuisEyGKCplTU7mqhH3j
- TLSH T18B75BF9AE7B511F4C4B6D0388A622227F9B1B4254734D7DB86958B5A2F33FF0963E700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1