ae038bc5801835f5e072741b6c889e48ac3380a625b1dcc9644603c02348e8fa

Analysis

max time kernel
150s
max time network
113s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
11/07/2026, 04:03

Target
2026-07-11_f06428bcf82fc41f470e165e08dffa72_glassworm_icedid_njrat_poet-rat_vidar.exe
Size 82.8MB
Sample260711-emgmcabs5j
SHA256 ae038bc5801835f5e072741b6c889e48ac3380a625b1dcc9644603c02348e8fa
MD5 f06428bcf82fc41f470e165e08dffa72
SHA1 2f4ca23936f35926ff21c69592dc76031dd31f78
SHA512 81b1f21c942fe4d8b85e3cd940ff28b164fecb96d3c77770c4e3347ffc86e0356ffc09a38515307ebfe0f81320efccbadd7ede8c4e5fed556b31939ce7c60f20
SSDEEP 786432:JsGe0xu5WaFJA1L9r5tRRX1NH4HPMSdLJvDNx7RFg:eRDFJA1Rr5VXDskQ1vxx7bg
TLSH
T1B5186C8675A641C5E0B2903D8543BA17DA713C255320BBCB0BA1039B7F77AE54FBEA70
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 3 IoCs

pid	Process
3736	2026-07-11_f06428bcf82fc41f470e165e08dffa72_glassworm_icedid_njrat_poet-rat_vidar.exe
3736	2026-07-11_f06428bcf82fc41f470e165e08dffa72_glassworm_icedid_njrat_poet-rat_vidar.exe
3736	2026-07-11_f06428bcf82fc41f470e165e08dffa72_glassworm_icedid_njrat_poet-rat_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-11_f06428bcf82fc41f470e165e08dffa72_glassworm_icedid_njrat_poet-rat_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-11_f06428bcf82fc41f470e165e08dffa72_glassworm_icedid_njrat_poet-rat_vidar.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:3736