General
- Target 2026-08-10_466f9bd2f6e672737eaba12c7d947606_glassworm_icedid_mespinoza_njrat_remcos_ryuk
- Size 26.2MB
- Sample260810-bbsnpagm5v
- SHA256 469d7ace287df3dd454705217a9595814813e662de56d340ae6f65790c7ba00b
- MD5 466f9bd2f6e672737eaba12c7d947606
- SHA1 0ca924d5ce20458136511ea58b2835345a6f86f7
- SHA512 375a7e4f6f063733f5f57e4095e3676450ee139f6a3c7646623f0c007128947252fe88b357c5bf3fd142a62f25f837d18021dc73032aabdb169c83f339a83af1
- SSDEEP 196608:iHtoF+wJYqQ35ChfHmqlfq333+vOaz5Ij:iHtoFIqQ35ChfZq333+t5
- TLSH T1A557D45412E682D5E1B39670DA35B1A59A37FC10CDB0C5CF314AFA7E2E36AD8CD21722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_466f9bd2f6e672737eaba12c7d947606_glassworm_icedid_mespinoza_njrat_remcos_ryuk.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_466f9bd2f6e672737eaba12c7d947606_glassworm_icedid_mespinoza_njrat_remcos_ryuk
- Size 26.2MB
- SHA256 469d7ace287df3dd454705217a9595814813e662de56d340ae6f65790c7ba00b
- MD5 466f9bd2f6e672737eaba12c7d947606
- SHA1 0ca924d5ce20458136511ea58b2835345a6f86f7
- SHA512 375a7e4f6f063733f5f57e4095e3676450ee139f6a3c7646623f0c007128947252fe88b357c5bf3fd142a62f25f837d18021dc73032aabdb169c83f339a83af1
- SSDEEP 196608:iHtoF+wJYqQ35ChfHmqlfq333+vOaz5Ij:iHtoFIqQ35ChfZq333+t5
- TLSH T1A557D45412E682D5E1B39670DA35B1A59A37FC10CDB0C5CF314AFA7E2E36AD8CD21722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory