General
- Target 2026-08-25_73a98189dd78b70255a84f25cc6c7162_elex_glassworm_icedid_njrat
- Size 4.0MB
- Sample260826-1a9cgstygt
- SHA256 112439a727d370db26483e1b9cd7cd45d76ac2beece737e547033a4439c371c2
- MD5 73a98189dd78b70255a84f25cc6c7162
- SHA1 90fda8d0156b274aac9b86f3f9305cf9b1222759
- SHA512 c511ea34c68e185508acce72034f294192cf168844681c8d6a7f1921ce6c4422cd41b56dc808a9e48d4cc254d1b80357fdde9d425064219d1fc01d38ca7bab0a
- SSDEEP 49152:bJDKLG/mgBXCRcLj8PeaTDNFUpKUt0nY7q4H3dm5R2ncBkC7LwCqmFQYDKjDDSgN:bB8xYj8Pea4Swq4H3ds2UZ/rHd4
- TLSH T120166A13F19A00D8C059D17ACF4A9232EB61BC494BF662EF365076D12A76EE0BB3D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_73a98189dd78b70255a84f25cc6c7162_elex_glassworm_icedid_njrat.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_73a98189dd78b70255a84f25cc6c7162_elex_glassworm_icedid_njrat
- Size 4.0MB
- SHA256 112439a727d370db26483e1b9cd7cd45d76ac2beece737e547033a4439c371c2
- MD5 73a98189dd78b70255a84f25cc6c7162
- SHA1 90fda8d0156b274aac9b86f3f9305cf9b1222759
- SHA512 c511ea34c68e185508acce72034f294192cf168844681c8d6a7f1921ce6c4422cd41b56dc808a9e48d4cc254d1b80357fdde9d425064219d1fc01d38ca7bab0a
- SSDEEP 49152:bJDKLG/mgBXCRcLj8PeaTDNFUpKUt0nY7q4H3dm5R2ncBkC7LwCqmFQYDKjDDSgN:bB8xYj8Pea4Swq4H3ds2UZ/rHd4
- TLSH T120166A13F19A00D8C059D17ACF4A9232EB61BC494BF662EF365076D12A76EE0BB3D714
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1