General
- Target 2026-08-30_cce006d2b1139fedce8d00de99a39386_glassworm_icedid_mespinoza_njrat_ryuk_stealc
- Size 17.1MB
- Sample260831-evp9fsdj7w
- SHA256 d143dc9adc648695e226c621ce0fd9a80a61e47d4a1f9880ad24cc927f9db16d
- MD5 cce006d2b1139fedce8d00de99a39386
- SHA1 c2b1a00fb45ea274461eca149ad02133652b202c
- SHA512 21219cc87e6e808d963276de81526645a11c92e2b7c383b46d3a63cf6a8b029a301095fc90d9c05894fbe3a83de5bd12ff506ceb1b9ab9d4b7f172c488baccac
- SSDEEP 393216:/W4H9BmPX9NHCCIWI0irMmJsv6tWKFdu9Cs7LN:O4H9UX9NOWIZrMP7LN
- TLSH T1AD075B47F14250EDC06AC0748B569631BA353C994B74A9EF2254BBB93E35BE02F3E718
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-30_cce006d2b1139fedce8d00de99a39386_glassworm_icedid_mespinoza_njrat_ryuk_stealc.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-30_cce006d2b1139fedce8d00de99a39386_glassworm_icedid_mespinoza_njrat_ryuk_stealc.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_cce006d2b1139fedce8d00de99a39386_glassworm_icedid_mespinoza_njrat_ryuk_stealc
- Size 17.1MB
- SHA256 d143dc9adc648695e226c621ce0fd9a80a61e47d4a1f9880ad24cc927f9db16d
- MD5 cce006d2b1139fedce8d00de99a39386
- SHA1 c2b1a00fb45ea274461eca149ad02133652b202c
- SHA512 21219cc87e6e808d963276de81526645a11c92e2b7c383b46d3a63cf6a8b029a301095fc90d9c05894fbe3a83de5bd12ff506ceb1b9ab9d4b7f172c488baccac
- SSDEEP 393216:/W4H9BmPX9NHCCIWI0irMmJsv6tWKFdu9Cs7LN:O4H9UX9NOWIZrMP7LN
- TLSH T1AD075B47F14250EDC06AC0748B569631BA353C994B74A9EF2254BBB93E35BE02F3E718
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.