General
- Target 2026-10-01_5a469d78eaca19855d02fdbc9b0d4180_elex_glassworm_icedid_njrat_vidar
- Size 7.8MB
- Sample261002-rdsdpsstgx
- SHA256 17d00b601018e6ac079dedc1501cd675d8617c591d36206bbacd8520b772a529
- MD5 5a469d78eaca19855d02fdbc9b0d4180
- SHA1 64a7a3101b0a0ffc27399449ffaae75651a3e51a
- SHA512 0a60c34fdcfe69227bf37761310a7e58a3a80501f8d89c4bd66b0042b6f5b5ba6b6fdfff5d69a27caf1408ad1b0ee3936e005c6a152e1b83693860c224f58e89
- SSDEEP 98304:A0nAAYEpxM3hK1MbQ9yDAD7KjjqkusjmqMhJ:9NoY1tIDewjqkjiqM7
- TLSH T1C3867C39AFE4C1E5F9ABD878A96BC672FA7179120833530B89D1C61EAF335524D18331
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-01_5a469d78eaca19855d02fdbc9b0d4180_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_5a469d78eaca19855d02fdbc9b0d4180_elex_glassworm_icedid_njrat_vidar
- Size 7.8MB
- SHA256 17d00b601018e6ac079dedc1501cd675d8617c591d36206bbacd8520b772a529
- MD5 5a469d78eaca19855d02fdbc9b0d4180
- SHA1 64a7a3101b0a0ffc27399449ffaae75651a3e51a
- SHA512 0a60c34fdcfe69227bf37761310a7e58a3a80501f8d89c4bd66b0042b6f5b5ba6b6fdfff5d69a27caf1408ad1b0ee3936e005c6a152e1b83693860c224f58e89
- SSDEEP 98304:A0nAAYEpxM3hK1MbQ9yDAD7KjjqkusjmqMhJ:9NoY1tIDewjqkjiqM7
- TLSH T1C3867C39AFE4C1E5F9ABD878A96BC672FA7179120833530B89D1C61EAF335524D18331
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1