General
- Target 2026-08-03_459591b11936ce4e43a2d594eb8c67f9_glassworm_icedid_njrat_ryuk
- Size 1.5MB
- Sample260804-pdp78swtaz
- SHA256 6eb1bb682ea7f39379fef78513b1e836714c037b60d2cc6c116444b1b9738305
- MD5 459591b11936ce4e43a2d594eb8c67f9
- SHA1 eba0c3ef76b75fc67b199fc3561ee0c58c4a8be7
- SHA512 e6e2156ffad295d831dd73bce76e502db8e0012d0ee668cef8df97feed2d31cf749aa2663256ed6306638d99a35eb99c258436f4473b014a10831f71ce92d6c3
- SSDEEP 49152:7LhFoJJYSSuisEyGKCplKy8OOAhgAQRX6OC:7eSuhNCplTX/BOC
- TLSH T13075CF8AE7B511E4C4B6C1388A632223F9B1B85547349BDB46958B5A2F33FF0963F701
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_459591b11936ce4e43a2d594eb8c67f9_glassworm_icedid_njrat_ryuk.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_459591b11936ce4e43a2d594eb8c67f9_glassworm_icedid_njrat_ryuk.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_459591b11936ce4e43a2d594eb8c67f9_glassworm_icedid_njrat_ryuk
- Size 1.5MB
- SHA256 6eb1bb682ea7f39379fef78513b1e836714c037b60d2cc6c116444b1b9738305
- MD5 459591b11936ce4e43a2d594eb8c67f9
- SHA1 eba0c3ef76b75fc67b199fc3561ee0c58c4a8be7
- SHA512 e6e2156ffad295d831dd73bce76e502db8e0012d0ee668cef8df97feed2d31cf749aa2663256ed6306638d99a35eb99c258436f4473b014a10831f71ce92d6c3
- SSDEEP 49152:7LhFoJJYSSuisEyGKCplKy8OOAhgAQRX6OC:7eSuhNCplTX/BOC
- TLSH T13075CF8AE7B511E4C4B6C1388A632223F9B1B85547349BDB46958B5A2F33FF0963F701
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1