General
- Target 2026-09-25_e6d43ddfdd1dd3f1be1e4dc5505adbe6_glassworm_icedid_njrat_stealc
- Size 2.5MB
- Sample260925-wp49vsshng
- SHA256 bb7bf84a8189a3a7ed50aa4d0321723926bbcfba47dafc44fd57a6f0899a37ed
- MD5 e6d43ddfdd1dd3f1be1e4dc5505adbe6
- SHA1 a2c312d07c789324172a00c7fb6e0ebcb82519fb
- SHA512 14609da7a00b24aa7846a1c5d0d9ad4323e4cb9693e97c5928212a4f43e3f9b16d25f84ce09bd87a194166aec0c9f21b993ea4d3b8e1ace73986cc02a4334b60
- SSDEEP 49152:7l/NFDx7eLl8wmb4KVBQw+NmLuJ8H9MKofPEzWjNWd9:7tDCSVfSfPEzcNW
- TLSH T17DC58C37629D16ECD366C1788B958992D3713CCD03306AEF07B049A69EE76D05F3A392
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-25_e6d43ddfdd1dd3f1be1e4dc5505adbe6_glassworm_icedid_njrat_stealc.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-25_e6d43ddfdd1dd3f1be1e4dc5505adbe6_glassworm_icedid_njrat_stealc.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-25_e6d43ddfdd1dd3f1be1e4dc5505adbe6_glassworm_icedid_njrat_stealc
- Size 2.5MB
- SHA256 bb7bf84a8189a3a7ed50aa4d0321723926bbcfba47dafc44fd57a6f0899a37ed
- MD5 e6d43ddfdd1dd3f1be1e4dc5505adbe6
- SHA1 a2c312d07c789324172a00c7fb6e0ebcb82519fb
- SHA512 14609da7a00b24aa7846a1c5d0d9ad4323e4cb9693e97c5928212a4f43e3f9b16d25f84ce09bd87a194166aec0c9f21b993ea4d3b8e1ace73986cc02a4334b60
- SSDEEP 49152:7l/NFDx7eLl8wmb4KVBQw+NmLuJ8H9MKofPEzWjNWd9:7tDCSVfSfPEzcNW
- TLSH T17DC58C37629D16ECD366C1788B958992D3713CCD03306AEF07B049A69EE76D05F3A392
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.