General
- Target 2026-08-20_cbc62e3b8cf398a0f9b61c9df8380ab9_elex_glassworm_gobot_icedid_njrat
- Size 2.3MB
- Sample260820-hjsf8a1fme
- SHA256 c281956553197ae4b1232cdfc4fc12bb462d37a1bf4285c01ac13e3b1b2c8a46
- MD5 cbc62e3b8cf398a0f9b61c9df8380ab9
- SHA1 fe411ed0a242ea8e39fc0a3316f64302bb269c8a
- SHA512 519fa235d2321654e605ae0bf19ba8d8ecf14c185e8a68f9a3e2633a53c81ad8b20fb7eafc488ecde708d643a48189af756789fa10b1653285d3bb72d52b0df6
- SSDEEP 24576:IWAVDKUTbQIzFLwLIM0iwg99Vpibu9QcrHp5HZxFq9iEPKmNJ0d:ItVmgbQIzZMPXpB91rHpn/qKmNg
- TLSH T171B50553EB814AD9E39D0936DF148150972AF2299BFF1221781852CCDE97387BF61A3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_cbc62e3b8cf398a0f9b61c9df8380ab9_elex_glassworm_gobot_icedid_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_cbc62e3b8cf398a0f9b61c9df8380ab9_elex_glassworm_gobot_icedid_njrat.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_cbc62e3b8cf398a0f9b61c9df8380ab9_elex_glassworm_gobot_icedid_njrat
- Size 2.3MB
- SHA256 c281956553197ae4b1232cdfc4fc12bb462d37a1bf4285c01ac13e3b1b2c8a46
- MD5 cbc62e3b8cf398a0f9b61c9df8380ab9
- SHA1 fe411ed0a242ea8e39fc0a3316f64302bb269c8a
- SHA512 519fa235d2321654e605ae0bf19ba8d8ecf14c185e8a68f9a3e2633a53c81ad8b20fb7eafc488ecde708d643a48189af756789fa10b1653285d3bb72d52b0df6
- SSDEEP 24576:IWAVDKUTbQIzFLwLIM0iwg99Vpibu9QcrHp5HZxFq9iEPKmNJ0d:ItVmgbQIzZMPXpB91rHpn/qKmNg
- TLSH T171B50553EB814AD9E39D0936DF148150972AF2299BFF1221781852CCDE97387BF61A3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Contacts a large (1481) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Adds Run key to start application