General
- Target 2026-09-29_4393a56c9d817c9700a6224119ecd6f3_elex_glassworm_icedid_njrat_swisyn_vidar
- Size 1.2MB
- Sample260930-1gcl4azdlf
- SHA256 39eb9d5ddb2ab690ff52c404fb34b994da080a2c6789b69d98fe8203f6d0b3fe
- MD5 4393a56c9d817c9700a6224119ecd6f3
- SHA1 abc32f58fa8380290a9c1aaf951adcc673858fa2
- SHA512 1a6f5bc60ba6fac140e17c4d55e53928a25885bde0cc9d4ee4a8f033b13967467396adfa64f30135be1698aa21c8dde8475455f70d33c37341d5efccd1cd2ae5
- SSDEEP 12288:PFUNDajiS56mvKWzPF1oi7FX61WSvEXvt7evETW8povUJe3QI9K6FJT:PFOajiufvKWMY61Wa65oETWQWbT
- TLSH T19F457B276B6405F8D5678075C952860FF7B27C1607609ACF13A073AB2F336D66E7A322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_4393a56c9d817c9700a6224119ecd6f3_elex_glassworm_icedid_njrat_swisyn_vidar.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_4393a56c9d817c9700a6224119ecd6f3_elex_glassworm_icedid_njrat_swisyn_vidar.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_4393a56c9d817c9700a6224119ecd6f3_elex_glassworm_icedid_njrat_swisyn_vidar
- Size 1.2MB
- SHA256 39eb9d5ddb2ab690ff52c404fb34b994da080a2c6789b69d98fe8203f6d0b3fe
- MD5 4393a56c9d817c9700a6224119ecd6f3
- SHA1 abc32f58fa8380290a9c1aaf951adcc673858fa2
- SHA512 1a6f5bc60ba6fac140e17c4d55e53928a25885bde0cc9d4ee4a8f033b13967467396adfa64f30135be1698aa21c8dde8475455f70d33c37341d5efccd1cd2ae5
- SSDEEP 12288:PFUNDajiS56mvKWzPF1oi7FX61WSvEXvt7evETW8povUJe3QI9K6FJT:PFOajiufvKWMY61Wa65oETWQWbT
- TLSH T19F457B276B6405F8D5678075C952860FF7B27C1607609ACF13A073AB2F336D66E7A322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory