General
- Target 2026-10-01_580e151164d1c5e72df54d082f1596d2_elex_glassworm_icedid_njrat_vidar
- Size 7.8MB
- Sample261002-rl2mcaz17p
- SHA256 0b867b118e25df83c3d68b4db3b6721f0b1904e8a53a50f4c9986b509ce4ba1e
- MD5 580e151164d1c5e72df54d082f1596d2
- SHA1 04595d062df0ccdb60797a6b7a68be3fd0f0d0a1
- SHA512 38ef8685973672d85409b6c8be03b1e901fc4a464ad91c1ccf377a388c3ba4dacdf535e13728268c13c07f6a1726e019bf8bca9e098747a6e9a9aa243e89db93
- SSDEEP 98304:j0nAAYEpaha1MbQ9yDAD7KjjqkusjmqMho:gNj1tIDewjqkjiqMi
- TLSH T1F4867D399BB4C1E5F9ABD878A97BC672FA717A110833530B89E0C61EAF335525D18331
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-01_580e151164d1c5e72df54d082f1596d2_elex_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_580e151164d1c5e72df54d082f1596d2_elex_glassworm_icedid_njrat_vidar
- Size 7.8MB
- SHA256 0b867b118e25df83c3d68b4db3b6721f0b1904e8a53a50f4c9986b509ce4ba1e
- MD5 580e151164d1c5e72df54d082f1596d2
- SHA1 04595d062df0ccdb60797a6b7a68be3fd0f0d0a1
- SHA512 38ef8685973672d85409b6c8be03b1e901fc4a464ad91c1ccf377a388c3ba4dacdf535e13728268c13c07f6a1726e019bf8bca9e098747a6e9a9aa243e89db93
- SSDEEP 98304:j0nAAYEpaha1MbQ9yDAD7KjjqkusjmqMho:gNj1tIDewjqkjiqMi
- TLSH T1F4867D399BB4C1E5F9ABD878A97BC672FA717A110833530B89E0C61EAF335525D18331
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1