General
- Target 2026-08-30_168b65600a5de06413d48f6bf66218e8_elex_glassworm_icedid_njrat_stop_vidar
- Size 1.6MB
- Sample260830-1anqsastht
- SHA256 b118ef490d1c8918931889222ff714dacc1bc624742cf0cbc1d18fa1b5a8ffc0
- MD5 168b65600a5de06413d48f6bf66218e8
- SHA1 6a616a98905de66243cc813f62b3d5c4adddbd13
- SHA512 9f304b72bfc9cda09196caa82a48d3b954c7a2d424f94b3b1e9af3033145ef86cd07c01d4d9577fd83a95c8ee3ae9d4bccb1c48cd24e9b2638d904b01eb21a8d
- SSDEEP 24576:m9+EM0qOslZOZGlkxqatgl8bd9+EM0qOslZOZGlkxqatgl8bTafDd70iTWCK:U+EYaqatglg+EYaqatglVDd79WCK
- TLSH T1EA858C42F68184B2E4670132895B93B69BB5BC221F11DB8F6398436E5F337D0BB36725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-30_168b65600a5de06413d48f6bf66218e8_elex_glassworm_icedid_njrat_stop_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-30_168b65600a5de06413d48f6bf66218e8_elex_glassworm_icedid_njrat_stop_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_168b65600a5de06413d48f6bf66218e8_elex_glassworm_icedid_njrat_stop_vidar
- Size 1.6MB
- SHA256 b118ef490d1c8918931889222ff714dacc1bc624742cf0cbc1d18fa1b5a8ffc0
- MD5 168b65600a5de06413d48f6bf66218e8
- SHA1 6a616a98905de66243cc813f62b3d5c4adddbd13
- SHA512 9f304b72bfc9cda09196caa82a48d3b954c7a2d424f94b3b1e9af3033145ef86cd07c01d4d9577fd83a95c8ee3ae9d4bccb1c48cd24e9b2638d904b01eb21a8d
- SSDEEP 24576:m9+EM0qOslZOZGlkxqatgl8bd9+EM0qOslZOZGlkxqatgl8bTafDd70iTWCK:U+EYaqatglg+EYaqatglVDd79WCK
- TLSH T1EA858C42F68184B2E4670132895B93B69BB5BC221F11DB8F6398436E5F337D0BB36725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Creates new service(s)
Executes dropped EXE
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1