General
- Target 2026-08-20_67c507fad9c4c8b6de4cd7088931f450_bazarloader_glassworm_icedid_njrat
- Size 19.5MB
- Sample260820-j2qk1sseqh
- SHA256 34f38c6c4626fa63d954502e6bdc9850a6a7602cc5ed092f8a91fb745fd70ebc
- MD5 67c507fad9c4c8b6de4cd7088931f450
- SHA1 05d2a32514a4769a461e19c1e2948c28c925773c
- SHA512 85f8b568c2530248771444b29ac2f7f3415d7d3bfece6609250babaec35d05dcb17f2affebca154f1f2de3738661d8f1a9fe2373435a4633126758dfe2753590
- SSDEEP 196608:wLx3makftyJPhGzDYtDdUSv37Cgx5/2oaXGt:qCtae6DdUSv7Cgx5/2o
- TLSH T1E8279C0BEBB651D1D1BAD23DA557622FF8B03499833457C766819E0A1B73BF4A83E700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_67c507fad9c4c8b6de4cd7088931f450_bazarloader_glassworm_icedid_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_67c507fad9c4c8b6de4cd7088931f450_bazarloader_glassworm_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_67c507fad9c4c8b6de4cd7088931f450_bazarloader_glassworm_icedid_njrat
- Size 19.5MB
- SHA256 34f38c6c4626fa63d954502e6bdc9850a6a7602cc5ed092f8a91fb745fd70ebc
- MD5 67c507fad9c4c8b6de4cd7088931f450
- SHA1 05d2a32514a4769a461e19c1e2948c28c925773c
- SHA512 85f8b568c2530248771444b29ac2f7f3415d7d3bfece6609250babaec35d05dcb17f2affebca154f1f2de3738661d8f1a9fe2373435a4633126758dfe2753590
- SSDEEP 196608:wLx3makftyJPhGzDYtDdUSv37Cgx5/2oaXGt:qCtae6DdUSv7Cgx5/2o
- TLSH T1E8279C0BEBB651D1D1BAD23DA557622FF8B03499833457C766819E0A1B73BF4A83E700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1