General
- Target 2026-08-05_5b414176060cd0a651d1d4409bf89792_amadey_elex_glassworm_hijackloader_icedid_njrat_vidar
- Size 7.6MB
- Sample260805-w5g49stdlc
- SHA256 9be6477cc2bb7cbf3b914be86742323e3f3b299fbc10c2e19d19eeb32cca8278
- MD5 5b414176060cd0a651d1d4409bf89792
- SHA1 8b91a5c60b2bac74b68a901fcae7dcb5deb230e5
- SHA512 5d5fb198a15f6fc96b573305fc0a59942af34e7116e66e3e646a4eca3ee7e997e46586a2fc9be3c5eccfae7ce756c1f976c9e4afc5d18db2c63a3a73aa2d28e5
- SSDEEP 49152:3qJtb2IygkEaSCpYqgT3S9tsgX8zEC8ULgCSA/Bkj0WeW4SkZP4sz9Mb2gkEaSiO:3nmad65TIOSA8fkZc2maNKd26+fkZcs
- TLSH T1D5864A16F2B88332E0B7D17EC0E26A69FA7130565B31CACB2245D66D1E677D2C536332
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-05_5b414176060cd0a651d1d4409bf89792_amadey_elex_glassworm_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_5b414176060cd0a651d1d4409bf89792_amadey_elex_glassworm_hijackloader_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_5b414176060cd0a651d1d4409bf89792_amadey_elex_glassworm_hijackloader_icedid_njrat_vidar
- Size 7.6MB
- SHA256 9be6477cc2bb7cbf3b914be86742323e3f3b299fbc10c2e19d19eeb32cca8278
- MD5 5b414176060cd0a651d1d4409bf89792
- SHA1 8b91a5c60b2bac74b68a901fcae7dcb5deb230e5
- SHA512 5d5fb198a15f6fc96b573305fc0a59942af34e7116e66e3e646a4eca3ee7e997e46586a2fc9be3c5eccfae7ce756c1f976c9e4afc5d18db2c63a3a73aa2d28e5
- SSDEEP 49152:3qJtb2IygkEaSCpYqgT3S9tsgX8zEC8ULgCSA/Bkj0WeW4SkZP4sz9Mb2gkEaSiO:3nmad65TIOSA8fkZc2maNKd26+fkZcs
- TLSH T1D5864A16F2B88332E0B7D17EC0E26A69FA7130565B31CACB2245D66D1E677D2C536332
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory