General
- Target 2026-10-02_e825f74ba7a5b332ca4622b7bffbb9b6_glassworm_icedid_mespinoza_njrat_ryuk_stealc
- Size 18.7MB
- Sample261002-3leclaab23
- SHA256 dce5c60d3863865c13f62eb27f92eb152dd47ee24d7150e3a6469fbbce517b1d
- MD5 e825f74ba7a5b332ca4622b7bffbb9b6
- SHA1 8c1bfd0e57ea04929de78dbf04242d74ada1889c
- SHA512 47c039d226ca6664ef117c133645aff9a2faa56bbc02030d3d363c17369f2d1d8f9e52e84f63961fe2d9823c6aa779955341d3d0623b2039e344615529bde344
- SSDEEP 393216:45hSWautxD624I9p0ayJsv6tWKFdu9C2:45hSStxDwIz0al
- TLSH T15B175B47B14390ABC26AC07087568E31BA357C954B74AADF2154BBA53E31BE02F3DF16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-10-02_e825f74ba7a5b332ca4622b7bffbb9b6_glassworm_icedid_mespinoza_njrat_ryuk_stealc.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-02_e825f74ba7a5b332ca4622b7bffbb9b6_glassworm_icedid_mespinoza_njrat_ryuk_stealc.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-02_e825f74ba7a5b332ca4622b7bffbb9b6_glassworm_icedid_mespinoza_njrat_ryuk_stealc
- Size 18.7MB
- SHA256 dce5c60d3863865c13f62eb27f92eb152dd47ee24d7150e3a6469fbbce517b1d
- MD5 e825f74ba7a5b332ca4622b7bffbb9b6
- SHA1 8c1bfd0e57ea04929de78dbf04242d74ada1889c
- SHA512 47c039d226ca6664ef117c133645aff9a2faa56bbc02030d3d363c17369f2d1d8f9e52e84f63961fe2d9823c6aa779955341d3d0623b2039e344615529bde344
- SSDEEP 393216:45hSWautxD624I9p0ayJsv6tWKFdu9C2:45hSStxDwIz0al
- TLSH T15B175B47B14390ABC26AC07087568E31BA357C954B74AADF2154BBA53E31BE02F3DF16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.