General
- Target 2026-09-09_c39d575568d7e034db77ea345c201192_bloored_elex_glassworm_icedid_njrat_vidar
- Size 1.1MB
- Sample260909-pl8pjsvhph
- SHA256 7a78061f80165af046afaa9d62faec16744f5df5c1b7f5dc09cc2b17dd0a88f2
- MD5 c39d575568d7e034db77ea345c201192
- SHA1 0865382e5fd6c2cfba7432b0d4fbeaeaa0cdc1fd
- SHA512 a266a3f9eefaffc951fd9ced6251cff916679c61a6f4230c95cc132f788692d8361f476f80531315fc5ba414815bfa1ede91185e099b1c313a71437379c6a3a0
- SSDEEP 24576:eRlVpLLwVB8xauO1gvNxXbn9ostpY0a2j:eRhLMVB8QuPxXb9ostPa2j
- TLSH T13E358C16B3A500F8E8B35170899B9A7BE271FC650621C3DF6384CA566F736919F3D322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-09_c39d575568d7e034db77ea345c201192_bloored_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-09_c39d575568d7e034db77ea345c201192_bloored_elex_glassworm_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260710-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_c39d575568d7e034db77ea345c201192_bloored_elex_glassworm_icedid_njrat_vidar
- Size 1.1MB
- SHA256 7a78061f80165af046afaa9d62faec16744f5df5c1b7f5dc09cc2b17dd0a88f2
- MD5 c39d575568d7e034db77ea345c201192
- SHA1 0865382e5fd6c2cfba7432b0d4fbeaeaa0cdc1fd
- SHA512 a266a3f9eefaffc951fd9ced6251cff916679c61a6f4230c95cc132f788692d8361f476f80531315fc5ba414815bfa1ede91185e099b1c313a71437379c6a3a0
- SSDEEP 24576:eRlVpLLwVB8xauO1gvNxXbn9ostpY0a2j:eRhLMVB8QuPxXb9ostPa2j
- TLSH T13E358C16B3A500F8E8B35170899B9A7BE271FC650621C3DF6384CA566F736919F3D322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory