General
- Target 2026-08-20_6196e3de3a703a22ca27f9e82b3372ed_glassworm_icedid_njrat_ryuk
- Size 1.5MB
- Sample260820-wdrjmasema
- SHA256 1e2a551dd650be96ced88558f7b1e6deab4eb1c01ec041da2c5ee722739c9d4f
- MD5 6196e3de3a703a22ca27f9e82b3372ed
- SHA1 ec0871360227d98fd49f17a0cd6c7b1182f42084
- SHA512 3db7de5a83170e6cb270854c759439fca39cf9625c9db5211a64fb0ca3dc34197e0c1d7d27f302cc5d87f2c819e51529c1bc265b9fe490602f966789c64283a8
- SSDEEP 24576:4Lh1gR6oPZP9j3tLOS3/26/sEyGKCplM4rVg9N9JMlDlfjRiVuVsWt5MJMs:4LhFoJJ9SSuisEyGKCplfgFIDRRAubtC
- TLSH T15C75BF9AE7B511F4C4B6C0388A632223F9B1B859473497DB86948B592F72FF0963F701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_6196e3de3a703a22ca27f9e82b3372ed_glassworm_icedid_njrat_ryuk.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_6196e3de3a703a22ca27f9e82b3372ed_glassworm_icedid_njrat_ryuk.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_6196e3de3a703a22ca27f9e82b3372ed_glassworm_icedid_njrat_ryuk
- Size 1.5MB
- SHA256 1e2a551dd650be96ced88558f7b1e6deab4eb1c01ec041da2c5ee722739c9d4f
- MD5 6196e3de3a703a22ca27f9e82b3372ed
- SHA1 ec0871360227d98fd49f17a0cd6c7b1182f42084
- SHA512 3db7de5a83170e6cb270854c759439fca39cf9625c9db5211a64fb0ca3dc34197e0c1d7d27f302cc5d87f2c819e51529c1bc265b9fe490602f966789c64283a8
- SSDEEP 24576:4Lh1gR6oPZP9j3tLOS3/26/sEyGKCplM4rVg9N9JMlDlfjRiVuVsWt5MJMs:4LhFoJJ9SSuisEyGKCplfgFIDRRAubtC
- TLSH T15C75BF9AE7B511F4C4B6C0388A632223F9B1B859473497DB86948B592F72FF0963F701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory