General
- Target 2026-09-06_6001ff3607d10df5e8457920d6883391_glassworm_icedid_njrat
- Size 10.7MB
- Sample260907-cvkymavwas
- SHA256 3346834c124ba26ea04432b68ce8bc1c3a678200896e384f4361c2e01a2586e9
- MD5 6001ff3607d10df5e8457920d6883391
- SHA1 8156cf5436a670a43a69d08699c76f2876a863b5
- SHA512 49b37c3983ef104f05ad0bb66bcc5b57ea1c63aa77c0e326b3f1af5ead9f2a7bdacf24beeeb887e65a9cddcbe7cadaa5aca56c7f1c67539a7731640732d4c2b3
- SSDEEP 98304:A2gxkAub3YiFhMIqk8t9b/YARjVqxDmGTZN:5gQYiFhMIqk8t9b/YAZVGDmG
- TLSH T1BCB63A1976BA1190DBBAC039D502532BED7038DA433C92FF928589C56F607F8AE7CB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
5 signatures
Behavioral task
behavioral1
Sample
2026-09-06_6001ff3607d10df5e8457920d6883391_glassworm_icedid_njrat.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-06_6001ff3607d10df5e8457920d6883391_glassworm_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-06_6001ff3607d10df5e8457920d6883391_glassworm_icedid_njrat
- Size 10.7MB
- SHA256 3346834c124ba26ea04432b68ce8bc1c3a678200896e384f4361c2e01a2586e9
- MD5 6001ff3607d10df5e8457920d6883391
- SHA1 8156cf5436a670a43a69d08699c76f2876a863b5
- SHA512 49b37c3983ef104f05ad0bb66bcc5b57ea1c63aa77c0e326b3f1af5ead9f2a7bdacf24beeeb887e65a9cddcbe7cadaa5aca56c7f1c67539a7731640732d4c2b3
- SSDEEP 98304:A2gxkAub3YiFhMIqk8t9b/YARjVqxDmGTZN:5gQYiFhMIqk8t9b/YAZVGDmG
- TLSH T1BCB63A1976BA1190DBBAC039D502532BED7038DA433C92FF928589C56F607F8AE7CB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables Discord URL observed in first stage droppers
-
Detects executables containing possible sandbox analysis VM usernames
-
Detects executables containing possible sandbox system UUIDs
-
Detects executables referencing virtualization MAC addresses