General
- Target 2026-09-06_d13c620ba7612aaac03542310e38cc46_elex_glassworm_icedid_njrat_stealc_vidar_wannacry
- Size 27.0MB
- Sample260906-vy38gsw1ds
- SHA256 026d84d64c8c56bf3b4a8e77c13673a659197677a4c8b54bc84183b4f5bccd33
- MD5 d13c620ba7612aaac03542310e38cc46
- SHA1 b9560f2c84e6a559118d51d88a67afa1ab14b6bf
- SHA512 fea2c47b58ef23883ffc07a5201a54d79f95ccc6b86acbe1f5b4cab5e85b86650f8d94164eef67132c77266f94403d88c737d2d7ab0d13ca0cf6428ce314ef91
- SSDEEP 98304:yK7K7K7K7K7K7K777K7K7K7K7K7K7K7K7c1MbQ9yDAD7KjjqkusjmqMhe:Y1tIDewjqkjiqMQ
- TLSH T16D575C19F98280F1D92B50B04CDBD3BFD6707E118A228FEBE649D71F6E337915828625
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-06_d13c620ba7612aaac03542310e38cc46_elex_glassworm_icedid_njrat_stealc_vidar_wannacry.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-06_d13c620ba7612aaac03542310e38cc46_elex_glassworm_icedid_njrat_stealc_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-06_d13c620ba7612aaac03542310e38cc46_elex_glassworm_icedid_njrat_stealc_vidar_wannacry
- Size 27.0MB
- SHA256 026d84d64c8c56bf3b4a8e77c13673a659197677a4c8b54bc84183b4f5bccd33
- MD5 d13c620ba7612aaac03542310e38cc46
- SHA1 b9560f2c84e6a559118d51d88a67afa1ab14b6bf
- SHA512 fea2c47b58ef23883ffc07a5201a54d79f95ccc6b86acbe1f5b4cab5e85b86650f8d94164eef67132c77266f94403d88c737d2d7ab0d13ca0cf6428ce314ef91
- SSDEEP 98304:yK7K7K7K7K7K7K777K7K7K7K7K7K7K7K7c1MbQ9yDAD7KjjqkusjmqMhe:Y1tIDewjqkjiqMQ
- TLSH T16D575C19F98280F1D92B50B04CDBD3BFD6707E118A228FEBE649D71F6E337915828625
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1