General
- Target 2026-08-25_64cf00a5614bbb0785a0ea102fa6a3d7_glassworm_hijackloader_icedid_njrat
- Size 1.9MB
- Sample260826-27v2ssvyay
- SHA256 b14fb62095b811a6d9e40ec135827ea12866a981a13947be16f2b25528d9569f
- MD5 64cf00a5614bbb0785a0ea102fa6a3d7
- SHA1 0c6dbcb8d802a3bef6ce9cb3e3717d1667c28b02
- SHA512 43e6d4a66111876766eadb108b6988722f91de215c6388d0bbc162b87250839df55908e4ecdf32fafba4cad725f0ef9afda97a8490e669403700160e7801e23f
- SSDEEP 49152:R9EeNSPwEW3cFSI4Tfm3hvbHsjAJcAMkPh:R9Nzm31PMoh
- TLSH T181958D4BB3B8019CD5BBC17CC627660BE7B174451710ABDF16A086AA2F23FE5567E320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-25_64cf00a5614bbb0785a0ea102fa6a3d7_glassworm_hijackloader_icedid_njrat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_64cf00a5614bbb0785a0ea102fa6a3d7_glassworm_hijackloader_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_64cf00a5614bbb0785a0ea102fa6a3d7_glassworm_hijackloader_icedid_njrat
- Size 1.9MB
- SHA256 b14fb62095b811a6d9e40ec135827ea12866a981a13947be16f2b25528d9569f
- MD5 64cf00a5614bbb0785a0ea102fa6a3d7
- SHA1 0c6dbcb8d802a3bef6ce9cb3e3717d1667c28b02
- SHA512 43e6d4a66111876766eadb108b6988722f91de215c6388d0bbc162b87250839df55908e4ecdf32fafba4cad725f0ef9afda97a8490e669403700160e7801e23f
- SSDEEP 49152:R9EeNSPwEW3cFSI4Tfm3hvbHsjAJcAMkPh:R9Nzm31PMoh
- TLSH T181958D4BB3B8019CD5BBC17CC627660BE7B174451710ABDF16A086AA2F23FE5567E320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing many confidential data stores found in browsers, mail clients, crypt
-
Detects executables using Telegram Chat Bot