General
- Target 2026-09-10_65fe7db9f4cded5c8ac33ddfcccdb7c2_elex_glassworm_icedid_njrat_vidar
- Size 7.8MB
- Sample260910-tfdpfat1c1
- SHA256 f981e672c4a7f23c70ab009fa3330d53e74a3c7ffeefd6eebfbae1c9aac766c2
- MD5 65fe7db9f4cded5c8ac33ddfcccdb7c2
- SHA1 27a5d0f78d1349cb7b59e2cdac9f227de90a9e29
- SHA512 30a64d6b286087cae9310c0617c9f567ae755d1ee58b0798ea06c45f4af153b29d5c763e1b0483a5a55574005c5c1c054a89b15e267c8be0cdca14a7e934ed5d
- SSDEEP 98304:z0nAAYEp5hUu1MbQ9yDAD7KjjqkusjmqMhM:QNuu1tIDewjqkjiqMO
- TLSH T162867D39ABA4C1E5F9ABD878A97BC672FA717E110833530B89D1C61EAF335524D18331
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-10_65fe7db9f4cded5c8ac33ddfcccdb7c2_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_65fe7db9f4cded5c8ac33ddfcccdb7c2_elex_glassworm_icedid_njrat_vidar
- Size 7.8MB
- SHA256 f981e672c4a7f23c70ab009fa3330d53e74a3c7ffeefd6eebfbae1c9aac766c2
- MD5 65fe7db9f4cded5c8ac33ddfcccdb7c2
- SHA1 27a5d0f78d1349cb7b59e2cdac9f227de90a9e29
- SHA512 30a64d6b286087cae9310c0617c9f567ae755d1ee58b0798ea06c45f4af153b29d5c763e1b0483a5a55574005c5c1c054a89b15e267c8be0cdca14a7e934ed5d
- SSDEEP 98304:z0nAAYEp5hUu1MbQ9yDAD7KjjqkusjmqMhM:QNuu1tIDewjqkjiqMO
- TLSH T162867D39ABA4C1E5F9ABD878A97BC672FA717E110833530B89D1C61EAF335524D18331
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE