General
- Target 2026-08-26_ee6396cb12f252e7d5e16919fc4f6a14_amadey_elex_glassworm_icedid_njrat_remcos_vidar
- Size 3.2MB
- Sample260827-ebmn8axvew
- SHA256 474112c332bbeb6ac761d88212dbd512608c314a4b2a1ade294ff77471402185
- MD5 ee6396cb12f252e7d5e16919fc4f6a14
- SHA1 554d44eacec77cc40b511493fb91536d5830db0b
- SHA512 0cf3e5bb1c9674f93b6b8d22e306829e10bcd7b53eead16c5ff7fae5c21668ab691568e530511633eefe15240fd5041fb5d17077bdbfafabf494e6f4cb13de4b
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatgluDWW1PszNsehO9QY5ThOuqJtb2I:TID41vyW1Psznc5Tv
- TLSH T119F57D15B7E546B1E1739131C5A692A6AE7278211B30C7CF1380E67D5F337C1EA3AB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-26_ee6396cb12f252e7d5e16919fc4f6a14_amadey_elex_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-26_ee6396cb12f252e7d5e16919fc4f6a14_amadey_elex_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-26_ee6396cb12f252e7d5e16919fc4f6a14_amadey_elex_glassworm_icedid_njrat_remcos_vidar
- Size 3.2MB
- SHA256 474112c332bbeb6ac761d88212dbd512608c314a4b2a1ade294ff77471402185
- MD5 ee6396cb12f252e7d5e16919fc4f6a14
- SHA1 554d44eacec77cc40b511493fb91536d5830db0b
- SHA512 0cf3e5bb1c9674f93b6b8d22e306829e10bcd7b53eead16c5ff7fae5c21668ab691568e530511633eefe15240fd5041fb5d17077bdbfafabf494e6f4cb13de4b
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatgluDWW1PszNsehO9QY5ThOuqJtb2I:TID41vyW1Psznc5Tv
- TLSH T119F57D15B7E546B1E1739131C5A692A6AE7278211B30C7CF1380E67D5F337C1EA3AB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory