2026-09-10_2dfd39ac8bab9e82ed6044ddbd48a601_elex_glassworm_icedid_njrat_stealc_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-10_2dfd39ac8bab9e82ed6044ddbd48a601_elex_glassworm_icedid_njrat_stealc_vidar
Size 21.5MB
Sample260910-w65lysthme
SHA256 634ce42c64474fcdb247640f91aa76d48714f13536b123e31ded59788a70e78d
MD5 2dfd39ac8bab9e82ed6044ddbd48a601
SHA1 b61a1a03dad0b866fe4ea7e5167723ff9df93394
SHA512 5cd2652745aea7e6bcb208fb1b25bfbbcdb77f5e59abf75bdb0eae969baeeff1689f93eaf6a24c7d49d1fc71b0da40839daee2f5e07e58f3c96ec144ff483106
SSDEEP 49152:U+Ej+E7+ES+ES+ES+E8+ES+ES+ES+E7+ES+ES+ES+E0+ES+ES+E7+ES+ES+ES+Ej:v1MbQ9yDAD7KjjqkusjmqMhS
TLSH
T1DE373B19F98340F1E96B50B04DDBD3BFDA707B2186224FA7EA49C71B6D33B615C28225
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-10_2dfd39ac8bab9e82ed6044ddbd48a601_elex_glassworm_icedid_njrat_stealc_vidar

File Explorer

2026-09-10_2dfd39ac8bab9e82ed6044ddbd48a601_elex_glassworm_icedid_njrat_stealc_vidar

.exe 21.5MB

2026-09-10_2dfd39ac8bab9e82ed6044ddbd48a601_elex_glassworm_icedid_njrat_stealc_vidar

SHA256 634ce42c64474fcdb247640f91aa76d48714f13536b123e31ded59788a70e78d
MD5 2dfd39ac8bab9e82ed6044ddbd48a601
SHA1 b61a1a03dad0b866fe4ea7e5167723ff9df93394
SHA512 5cd2652745aea7e6bcb208fb1b25bfbbcdb77f5e59abf75bdb0eae969baeeff1689f93eaf6a24c7d49d1fc71b0da40839daee2f5e07e58f3c96ec144ff483106
SSDEEP 49152:U+Ej+E7+ES+ES+ES+E8+ES+ES+ES+E7+ES+ES+ES+E0+ES+ES+E7+ES+ES+ES+Ej:v1MbQ9yDAD7KjjqkusjmqMhS
TLSH
T1DE373B19F98340F1E96B50B04DDBD3BFDA707B2186224FA7EA49C71B6D33B615C28225
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5136

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

52KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

544B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/14

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/29

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/41

Size

512B

Virtual Size

181B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/55

Size

512B

Virtual Size

160B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/67

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/80

Size

512B

Virtual Size

159B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/91

Size

512B

Virtual Size

492B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-10_2dfd39ac8bab9e82ed6044ddbd48a601_elex_glassworm_icedid_njrat_stealc_vidar

generic