General
- Target 2026-09-04_40d8867076a6dd97867d29c7cd25039b_glassworm_icedid_njrat_ryuk
- Size 1.5MB
- Sample260905-qcmamavflf
- SHA256 c5a5f2b98b905b994e726d3fb723a3180fd472e8742b4e2eace73ead587e066c
- MD5 40d8867076a6dd97867d29c7cd25039b
- SHA1 821f85792fd41c8fb0d6fa6c6a87f60e6d9114fe
- SHA512 e0261e22278de9d7a423e9ecfdd2405250f60a35f3bd59c3651615b76ea56b194a9379b841538b9b29761d367f6e60ccbe5008ad20f1085b823aa816203ce6b6
- SSDEEP 49152:wLhFoJJYSSuisEyGKCplSJsu2UCSoN0vzSk:weSuhNCplSJH287
- TLSH T1B575BF9AE7B511F4C8B6C0388A622223F9B1B455473497DB86948B5A2F33FF4963F710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_40d8867076a6dd97867d29c7cd25039b_glassworm_icedid_njrat_ryuk.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_40d8867076a6dd97867d29c7cd25039b_glassworm_icedid_njrat_ryuk.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_40d8867076a6dd97867d29c7cd25039b_glassworm_icedid_njrat_ryuk
- Size 1.5MB
- SHA256 c5a5f2b98b905b994e726d3fb723a3180fd472e8742b4e2eace73ead587e066c
- MD5 40d8867076a6dd97867d29c7cd25039b
- SHA1 821f85792fd41c8fb0d6fa6c6a87f60e6d9114fe
- SHA512 e0261e22278de9d7a423e9ecfdd2405250f60a35f3bd59c3651615b76ea56b194a9379b841538b9b29761d367f6e60ccbe5008ad20f1085b823aa816203ce6b6
- SSDEEP 49152:wLhFoJJYSSuisEyGKCplSJsu2UCSoN0vzSk:weSuhNCplSJH287
- TLSH T1B575BF9AE7B511F4C8B6C0388A622223F9B1B455473497DB86948B5A2F33FF4963F710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1