General
- Target 2026-09-29_1ea6a44f4d254112450738c7dbc2bfb5_glassworm_icedid_njrat_wannacry
- Size 3.3MB
- Sample260930-3bgpzacd98
- SHA256 1207f1881d67dc715092ad45790b62667819557e07b3c690655d7843afca5af1
- MD5 1ea6a44f4d254112450738c7dbc2bfb5
- SHA1 46a8cec9d0f0cbc2dad49b903825e0de9515a0f5
- SHA512 4101af539cccd272688bef63187c49c43e7a05fbbbfb4e9476030d5c52964fb9a02f422981de7ce39235f4513235176950be6eed0acae87ec5f39e9334e76a7c
- SSDEEP 49152:DRxjygf/vjfNlsERyd1Ch+60AQtOaa/kInMX14YmfTshpCVjMVcr7HO:DrjvX0AbnMX1lqojCVjSn
- TLSH T1CBF5F16B3EAA6881FD20787CF5608A1BF0451DB075410E1B2B72183D1EFE519BB6B67C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-09-29_1ea6a44f4d254112450738c7dbc2bfb5_glassworm_icedid_njrat_wannacry.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_1ea6a44f4d254112450738c7dbc2bfb5_glassworm_icedid_njrat_wannacry.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_1ea6a44f4d254112450738c7dbc2bfb5_glassworm_icedid_njrat_wannacry
- Size 3.3MB
- SHA256 1207f1881d67dc715092ad45790b62667819557e07b3c690655d7843afca5af1
- MD5 1ea6a44f4d254112450738c7dbc2bfb5
- SHA1 46a8cec9d0f0cbc2dad49b903825e0de9515a0f5
- SHA512 4101af539cccd272688bef63187c49c43e7a05fbbbfb4e9476030d5c52964fb9a02f422981de7ce39235f4513235176950be6eed0acae87ec5f39e9334e76a7c
- SSDEEP 49152:DRxjygf/vjfNlsERyd1Ch+60AQtOaa/kInMX14YmfTshpCVjMVcr7HO:DrjvX0AbnMX1lqojCVjSn
- TLSH T1CBF5F16B3EAA6881FD20787CF5608A1BF0451DB075410E1B2B72183D1EFE519BB6B67C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects binaries and memory artifacts referencing sandbox DLLs typically observed in sandbox evasion
-
Detects binaries and memory artifacts referencing sandbox product IDs
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE