2026-08-03_68cd8b2eaf3aeb79c0839416d542f204_glassworm_icedid_njrat

General

Target
2026-08-03_68cd8b2eaf3aeb79c0839416d542f204_glassworm_icedid_njrat
Size 1.3MB
Sample260804-nn3qmsyfnc
SHA256 7f5d9194172ad0ea4775ac60efcb1bb3f0ce2f0764032cdac5d3551339f0e389
MD5 68cd8b2eaf3aeb79c0839416d542f204
SHA1 59e49e02e7b79b15a4616fd3c407c7b90adfb0ca
SHA512 64bccf32d64da89ed9e2b0e1b932495408efe1f7f8e33ea23b33d08333b630a2b618d604b5c96bdc64054562a3a41c8ec4b5718110cb344441f9027bd8444a19
SSDEEP 24576:kbc6zZC6VhsUjzW4D6AVV0Bk391V7AuXJ53D8WdoYp+7n1lMoUQsK:QxZnHw+9/7AtWQbMjFK
TLSH
T16E55E142B190EFDCCA2BC4BCC53B0E793D4A1827D364FA6716CC46076E1B2868F659B5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_68cd8b2eaf3aeb79c0839416d542f204_glassworm_icedid_njrat

File Explorer

2026-08-03_68cd8b2eaf3aeb79c0839416d542f204_glassworm_icedid_njrat

.exe 1.3MB

2026-08-03_68cd8b2eaf3aeb79c0839416d542f204_glassworm_icedid_njrat

IMPHASH b1930f50720d9397ebb40335bba0dc51
SHA256 7f5d9194172ad0ea4775ac60efcb1bb3f0ce2f0764032cdac5d3551339f0e389
MD5 68cd8b2eaf3aeb79c0839416d542f204
SHA1 59e49e02e7b79b15a4616fd3c407c7b90adfb0ca
SHA512 64bccf32d64da89ed9e2b0e1b932495408efe1f7f8e33ea23b33d08333b630a2b618d604b5c96bdc64054562a3a41c8ec4b5718110cb344441f9027bd8444a19
SSDEEP 24576:kbc6zZC6VhsUjzW4D6AVV0Bk391V7AuXJ53D8WdoYp+7n1lMoUQsK:QxZnHw+9/7AtWQbMjFK
TLSH
T16E55E142B190EFDCCA2BC4BCC53B0E793D4A1827D364FA6716CC46076E1B2868F659B5
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

551728

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\CloudBuild\ws\image_tuw_dfyte_vycr\17445\gsdk\build\Release\cefsubprocess.pdb

0tq.u

VTZZuvzQq yrFGRaUyEQdz bWzSFsCv RKqPsqpfirp JDvvnQDPMJeGG hoPZNhmJzfKM ktdncWHYcJpa OBkZULJTjWZINM vKThZcyJ fHAXkuqoajUYNWOI gGXvsDzJUHBVD JMDbVBCGBEZRKT BcbqlFNwiNZFGPyGhL qlpsByIGCJjEukuj iQveAZHEqWaBOE pbmKGKIhagqU CJYmqsNQlEjYthDENyxwGuT nVPvUVKWXeXDtfPyOTAUvYs RESGWdULwZicpxYTGPoqBR AnmUuwohXYpsIwF NsCqfcTdVeACZRA QazFyhkv TCFIbv sgSkcseNybmGINC bmPluYODrnvVh UYSYKwIYHYxenttA wtdNzhVyQ EHeTwUGsczZNijVzqh NLYZaJBnWxAoBEGIvdCVXM eerDLopbshC iGHHEGYBhRSUickYttSNs kdiaWeinWnK YsyhiUmGTOwJEtlkxv ZsfBtLkpEXFTffqOQu GlvrXEpMTUivu sgjNtJhuUfhajn rJuzzkqUPdWT LaygpcbBLIYgsx MgdMKHGTTeCqxW UmcTubrUMioyJK mjsMUfk wXeCLBGZOMa OhoNBSSTNju PIwAIDeH TZeqNbGkDWmH WcJmNwng WqHfIPWmg avfVxRImSpIruhLR DutvOdBcDwsSGpGrMt JbHFRKdrGUv yeknACmZOTwvfjlmVf laZokMUsD LIqKcLiOPeTO daKsReSBBSkjgL qumWbNORCOqXZX aHDALPfrpDF nXGTvoi sjfIfVIEUsP pGVPwUdjhfx wEswVihj KpFYOwGuXwwldupDjeYVnlefDPfyuvmTGJTxo ffXVlaNHWSViHJIyRPwlH mutxnoEKSCKVTxFweDGfOPQjh QGCSqycQLewfAl tukXsyxkYuITzHZdq vofIRcWOGca AhRRHOfUmJMWHtRS KyNnEeqStATFNOs SCATmbESPhoWoIlZD dmraLsFTvhnyymRKUnK PLHUIWbPSfgTUuSArbTyZhP yqdiVkJsDuiTgydcGC RYtVPtMbvgCGYmIGxGw WkbeFMmOApFNnEZOosUXLrw AYCxlpXjgylhjtQoOdQKCupSo AEHjGdnMEzFeeSRE snPXYDQrFZHXewfFo DyCpqSELHYgJzzgxsKfivBTqTsW SBzshdvTqPpcluedbwzmRKBp rhIxwhAOPSrvQFcT zKJDpRGODkWLybZGppzrPl eTRgikUrkPpySoWqq pUCISUSNP eKXvsJjeDcgjljM odPlydmCmVdftO ChbrDRhjBmuyYet kzRzfLqcSSyaX udZFHzLwFvcfarFDPoc ealrzoUpxLsRP JCUzpOawtGPPq ctaFmmIEMZrVlEuilIjyX haYvhHTHfvxcmiaSXZaOLoQuTDf AhMdMrkKVcYUcZhpfvHc DyfSfixMpnduHUUffbGx IirvVbdUz uzDWKtzKXAJflDspHGO UWZRuaXuBiL

Name

.text

Size

998KB

Virtual Size

997KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

239KB

Virtual Size

238KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

61KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_68cd8b2eaf3aeb79c0839416d542f204_glassworm_icedid_njrat

0tq.u

generic