General
- Target 2026-09-19_a3edb56d922a560a92c025de47bba2fc_glassworm_icedid_njrat
- Size 3.0MB
- Sample260919-2aadtsty6r
- SHA256 d8a67a5f0402f8b6db17f5a184e53b6f716fe43be656c7240dfc603a6dc2234b
- MD5 a3edb56d922a560a92c025de47bba2fc
- SHA1 c3729d460a0c1c985c6b30e4dab64ca97e689a64
- SHA512 99eb05ddfaea400838016607f6402c7bf0c560b32506a16cb0ee00b83ca37f5145159e661b99bd6d24501df05789902e0db90ae32e13c4f987fb6cf7197e359e
- SSDEEP 24576:LQ7COhpkjFvhSCuKV1t5A3MVvOUBlpOSYTLFV:c79hpkjf95ASGUhYT
- TLSH T1D1E5D81BF7B650D5E1BAC038D553622AFC7134A6833C97EB92818E455B60BE8EE3D740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-19_a3edb56d922a560a92c025de47bba2fc_glassworm_icedid_njrat.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-19_a3edb56d922a560a92c025de47bba2fc_glassworm_icedid_njrat.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-19_a3edb56d922a560a92c025de47bba2fc_glassworm_icedid_njrat
- Size 3.0MB
- SHA256 d8a67a5f0402f8b6db17f5a184e53b6f716fe43be656c7240dfc603a6dc2234b
- MD5 a3edb56d922a560a92c025de47bba2fc
- SHA1 c3729d460a0c1c985c6b30e4dab64ca97e689a64
- SHA512 99eb05ddfaea400838016607f6402c7bf0c560b32506a16cb0ee00b83ca37f5145159e661b99bd6d24501df05789902e0db90ae32e13c4f987fb6cf7197e359e
- SSDEEP 24576:LQ7COhpkjFvhSCuKV1t5A3MVvOUBlpOSYTLFV:c79hpkjf95ASGUhYT
- TLSH T1D1E5D81BF7B650D5E1BAC038D553622AFC7134A6833C97EB92818E455B60BE8EE3D740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.