General
- Target 2026-09-13_3694fcfde6507b6630da69aa1b683004_elex_glassworm_icedid_njrat_vidar
- Size 7.8MB
- Sample260913-ttpc4aal6w
- SHA256 11c6c14e12362b0c53695ded55f10db64d60e730a96c86a88634c27d5bb99d09
- MD5 3694fcfde6507b6630da69aa1b683004
- SHA1 a8ad799f5a92a101a185e2c67f4dadfccc864f6a
- SHA512 a1b3737e4ea87254559aad2124528a210ad7d489c0836795ca24b23104358972a8957b8f0f8ff6ac8ae6c924363001a689f7d20cc1826ede69530b1dc319b5b4
- SSDEEP 98304:L0nAAYEpWhdu1MbQ9yDAD7KjjqkusjmqMhG:YNOu1tIDewjqkjiqMU
- TLSH T1FB867C39ABA4C1F5F9ABD878A97B8672FA717E100833530B89D0D61EAF335525D18331
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-13_3694fcfde6507b6630da69aa1b683004_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-13_3694fcfde6507b6630da69aa1b683004_elex_glassworm_icedid_njrat_vidar
- Size 7.8MB
- SHA256 11c6c14e12362b0c53695ded55f10db64d60e730a96c86a88634c27d5bb99d09
- MD5 3694fcfde6507b6630da69aa1b683004
- SHA1 a8ad799f5a92a101a185e2c67f4dadfccc864f6a
- SHA512 a1b3737e4ea87254559aad2124528a210ad7d489c0836795ca24b23104358972a8957b8f0f8ff6ac8ae6c924363001a689f7d20cc1826ede69530b1dc319b5b4
- SSDEEP 98304:L0nAAYEpWhdu1MbQ9yDAD7KjjqkusjmqMhG:YNOu1tIDewjqkjiqMU
- TLSH T1FB867C39ABA4C1F5F9ABD878A97B8672FA717E100833530B89D0D61EAF335525D18331
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE