General
- Target 2026-04-18_446557e568630f9d79341e0129a539ea_glassworm_icedid_vidar
- Size 356KB
- Sample260418-dc7v4sft7x
- SHA256 1badf0a7b2512634c6a3c76279d03cf97dafbb39b371557b1a0a00e222462748
- MD5 446557e568630f9d79341e0129a539ea
- SHA1 0a6be30b6e19542771633e8243e8f2b088d35bdd
- SHA512 d2963808c1a4e4a51798fe199940a25c04ecd93184a2093d63309419f95a44edc28baafbc8d7deb7b77c10fdea59c779724b2f481fca177f97e20c95f1b48b5f
- SSDEEP 6144:Kdbu1J7PCaXxMLGxKWR1mlkVl+lIzohdMxB+RNGrQLFR461+nO7zs0IBVLj:muqyxMLNplyon0BB
- TLSH T17E743838BA65DCE4CB2FB1B489212E4551713C0B8730E69FA68525DB5E372D0EF3D928
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-18_446557e568630f9d79341e0129a539ea_glassworm_icedid_vidar.exe
Resource
win10v2004-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-18_446557e568630f9d79341e0129a539ea_glassworm_icedid_vidar.exe
Resource
win11-20260130-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://webcdns.com:2083/static-directory/lt.mp3
Attributes
-
user_agent
Host: webcdns.com Connection: close Accept: image/* User-Agent: Mozilla/5.0 (Windows Phone 10.0; Android 6.0.1; Microsoft; RM-1152) AppleWebKit/537.36 (KHTML, like Gecko)
Targets
-
- Target 2026-04-18_446557e568630f9d79341e0129a539ea_glassworm_icedid_vidar
- Size 356KB
- SHA256 1badf0a7b2512634c6a3c76279d03cf97dafbb39b371557b1a0a00e222462748
- MD5 446557e568630f9d79341e0129a539ea
- SHA1 0a6be30b6e19542771633e8243e8f2b088d35bdd
- SHA512 d2963808c1a4e4a51798fe199940a25c04ecd93184a2093d63309419f95a44edc28baafbc8d7deb7b77c10fdea59c779724b2f481fca177f97e20c95f1b48b5f
- SSDEEP 6144:Kdbu1J7PCaXxMLGxKWR1mlkVl+lIzohdMxB+RNGrQLFR461+nO7zs0IBVLj:muqyxMLNplyon0BB
- TLSH T17E743838BA65DCE4CB2FB1B489212E4551713C0B8730E69FA68525DB5E372D0EF3D928
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.