General
- Target 2026-06-02_436b40605c129722e03462c14a1557ea_elex_glassworm_icedid_remcos
- Size 2.9MB
- Sample260602-clkw9sbv2s
- SHA256 012fbc46367ab5107b40fce08c9e1212e526eb7b06d9e8dec97c5fd9760a7ae6
- MD5 436b40605c129722e03462c14a1557ea
- SHA1 5fd7b3b9831f56f157de203c80b14663d6b751e6
- SHA512 c2b0baaf3e132d0b4f642b6bf6d74d712ce3c99aaac63b1999e006feaafbf6b6edd8350ea7a870a87cd4d0442b2c1dc438e0acfa4d4a1aa43115de694fdc8571
- SSDEEP 49152:0rn5L4/vmOXPwLTQuSlV+L53NyIVWb0fVspY8O/:qVETzbaZ
- TLSH T176E5E807BB994987E8770A3909770F146772FCA14A62D31F316C611E9F7BB808E21B76
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-02_436b40605c129722e03462c14a1557ea_elex_glassworm_icedid_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_436b40605c129722e03462c14a1557ea_elex_glassworm_icedid_remcos
- Size 2.9MB
- SHA256 012fbc46367ab5107b40fce08c9e1212e526eb7b06d9e8dec97c5fd9760a7ae6
- MD5 436b40605c129722e03462c14a1557ea
- SHA1 5fd7b3b9831f56f157de203c80b14663d6b751e6
- SHA512 c2b0baaf3e132d0b4f642b6bf6d74d712ce3c99aaac63b1999e006feaafbf6b6edd8350ea7a870a87cd4d0442b2c1dc438e0acfa4d4a1aa43115de694fdc8571
- SSDEEP 49152:0rn5L4/vmOXPwLTQuSlV+L53NyIVWb0fVspY8O/:qVETzbaZ
- TLSH T176E5E807BB994987E8770A3909770F146772FCA14A62D31F316C611E9F7BB808E21B76
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Citadel payload
-
Suspicious use of SetThreadContext