General
- Target 2026-08-10_f889e2ab25e38d0a4836f2ec26da355a_elex_glassworm_icedid_njrat_stealc_vidar
- Size 24.2MB
- Sample260810-d9pe2avsfz
- SHA256 1d747a59123c134a352e28c2307d56902b7f345938d15a51bfd325a3742299b4
- MD5 f889e2ab25e38d0a4836f2ec26da355a
- SHA1 6b2323195a21b2115c925d6206b1e670807793ae
- SHA512 8cced71eb10848e906103310edbc1a720d5fa6b9717c100ae43cb68f4aeaff2818486560d6a34cc61f5be739e6ec38a82257aa7bae48ba53939d4a6d051f4e2b
- SSDEEP 196608:kFlfFlfFlfFlfFlfFlfFlfFl71tIDewjqkjiqMwz:i3333333d8Kwekywz
- TLSH T16047D01AFEA480E0ED7BD43898A7D632D9327D294432974B89D1F60B6F33A615C2D731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-10_f889e2ab25e38d0a4836f2ec26da355a_elex_glassworm_icedid_njrat_stealc_vidar.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_f889e2ab25e38d0a4836f2ec26da355a_elex_glassworm_icedid_njrat_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_f889e2ab25e38d0a4836f2ec26da355a_elex_glassworm_icedid_njrat_stealc_vidar
- Size 24.2MB
- SHA256 1d747a59123c134a352e28c2307d56902b7f345938d15a51bfd325a3742299b4
- MD5 f889e2ab25e38d0a4836f2ec26da355a
- SHA1 6b2323195a21b2115c925d6206b1e670807793ae
- SHA512 8cced71eb10848e906103310edbc1a720d5fa6b9717c100ae43cb68f4aeaff2818486560d6a34cc61f5be739e6ec38a82257aa7bae48ba53939d4a6d051f4e2b
- SSDEEP 196608:kFlfFlfFlfFlfFlfFlfFlfFl71tIDewjqkjiqMwz:i3333333d8Kwekywz
- TLSH T16047D01AFEA480E0ED7BD43898A7D632D9327D294432974B89D1F60B6F33A615C2D731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1