2026-08-05_78f35eef0588fb209832538412648902_cryptbot_elex_glassworm_hijackloader_icedid_njrat_vidar

General

Target
2026-08-05_78f35eef0588fb209832538412648902_cryptbot_elex_glassworm_hijackloader_icedid_njrat_vidar
Size 15.5MB
Sample260805-wvddbsytht
SHA256 6918adac08e26962c6fd9faeb0303906b20f33b3a26307143597b9da8c4f8cc4
MD5 78f35eef0588fb209832538412648902
SHA1 a5ce941e71b685d9122546660657d8b13221f487
SHA512 0c0fee7f3733b9f7396b783cd286380cd1809901776cbc44a131d988f9ebafef311cf72429e80f7ab2a37dac5ba244d50f1c4638e0ec1ada2fedcd2b5a1972ce
SSDEEP 196608:CTehREvPzE9RmsKnMmATI8gRmJZWtWKGbYzskbeaA8QphPugy:CT7vrJnVCZW5GiPX+Pugy
TLSH
T164F68D127B9280F6D96241308DB9A79A9379FC251F3147C7A3A87B1E0E325D32E36717
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-05_78f35eef0588fb209832538412648902_cryptbot_elex_glassworm_hijackloader_icedid_njrat_vidar

2026-08-05_78f35eef0588fb209832538412648902_cryptbot_elex_glassworm_hijackloader_icedid_njrat_vidar

.exe 15.5MB

IMPHASH 2503dbcf0f6c653b707b8fd511f0edb8
SHA256 6918adac08e26962c6fd9faeb0303906b20f33b3a26307143597b9da8c4f8cc4
MD5 78f35eef0588fb209832538412648902
SHA1 a5ce941e71b685d9122546660657d8b13221f487
SHA512 0c0fee7f3733b9f7396b783cd286380cd1809901776cbc44a131d988f9ebafef311cf72429e80f7ab2a37dac5ba244d50f1c4638e0ec1ada2fedcd2b5a1972ce
SSDEEP 196608:CTehREvPzE9RmsKnMmATI8gRmJZWtWKGbYzskbeaA8QphPugy:CT7vrJnVCZW5GiPX+Pugy
TLSH
T164F68D127B9280F6D96241308DB9A79A9379FC251F3147C7A3A87B1E0E325D32E36717
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5276

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths