General
- Target 2026-08-10_f3f8c7cfd560af81b36e31f7a26df9de_glassworm_icedid_mespinoza_njrat_ryuk
- Size 9.3MB
- Sample260810-wmpfmahf67
- SHA256 082b76f9e1c4cd2ee2dbf61a9f1b77176414528f8444e2ac7d23923aa8b541db
- MD5 f3f8c7cfd560af81b36e31f7a26df9de
- SHA1 a3e9c728ddfce2d9c71dee8ff2360764279a368b
- SHA512 3febc1b56160512c1ab1be08c96e5db7f592bbe30c9c5f0c4498f190588b0b914290e439b3c0ccfa89024d785cb8c120c9a80b0fd9c54222b167a44d18c7239c
- SSDEEP 98304:Kxmxacg20IbmbqJJ7xX2FQLNn8ea2bPzXb/jHw+fWfEL+k:wd2bqq3f+eaEL+k
- TLSH T11BA67C4A66B840D5D1BAC238C653864BE6B2B8511B33C7DF316D869E1F336E18D7A331
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_f3f8c7cfd560af81b36e31f7a26df9de_glassworm_icedid_mespinoza_njrat_ryuk.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_f3f8c7cfd560af81b36e31f7a26df9de_glassworm_icedid_mespinoza_njrat_ryuk
- Size 9.3MB
- SHA256 082b76f9e1c4cd2ee2dbf61a9f1b77176414528f8444e2ac7d23923aa8b541db
- MD5 f3f8c7cfd560af81b36e31f7a26df9de
- SHA1 a3e9c728ddfce2d9c71dee8ff2360764279a368b
- SHA512 3febc1b56160512c1ab1be08c96e5db7f592bbe30c9c5f0c4498f190588b0b914290e439b3c0ccfa89024d785cb8c120c9a80b0fd9c54222b167a44d18c7239c
- SSDEEP 98304:Kxmxacg20IbmbqJJ7xX2FQLNn8ea2bPzXb/jHw+fWfEL+k:wd2bqq3f+eaEL+k
- TLSH T11BA67C4A66B840D5D1BAC238C653864BE6B2B8511B33C7DF316D869E1F336E18D7A331
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory