General

  • Target
    2026-11-07_23733441a91bbc33f9a03c4dc88fdfc5_glassworm_icedid_megazord_njrat_ryuk_stealc
  • Size 59.3MB
  • Sample261107-tl6bmsfc97
  • SHA256 eceaa6b943fc868b26daf6e0fe96cc9d6d2ecf89f043df6c1bb5b2946e995d6e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 2026-11-07_23733441a91bbc33f9a03c4dc88fdfc5_glassworm_icedid_megazord_njrat_ryuk_stealc
    .exe 59.3MB

2026-11-07_23733441a91bbc33f9a03c4dc88fdfc5_glassworm_icedid_megazord_njrat_ryuk_stealc

  • IMPHASH 499723942501a92747b83ef08cb3b07b
  • SHA256 eceaa6b943fc868b26daf6e0fe96cc9d6d2ecf89f043df6c1bb5b2946e995d6e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
5e:df:2f:ac:ab:f5:12:9c:b3:e5:fc:e5:8e:c6:bb:ea:6e:c5:f0:d4:4b:31:fa:db:ba:14:2d:e6:ce:d0:62:d3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Stichting DuckDB Foundation,O=Stichting DuckDB Foundation,L=Amsterdam,C=NL
Minor OS version
0
Major OS version
6
Entry point
46034784
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths