General
- Target 2026-07-13_16bbb42cbcb79d6178dee734dedd9a25_glassworm_icedid_njrat_remcos_vidar
- Size 43.1MB
- Sample260714-b626lsct8q
- SHA256 b9b2bcb8ba870ef50a7e6ac7edc3788619ba29c7c63b3a6ace684887059c6fa1
- MD5 16bbb42cbcb79d6178dee734dedd9a25
- SHA1 241d42d3f4f4df6cf1a681b8284f26c165a263e3
- SHA512 2cd0d9c79842f531d1eee9628ce9a1116bc08725ead1a89f5c5389e6673b1f9eda0dab6caeacda015cf1b770c43dd461ead1d53bd55e6f140c0c3cbc5b40aa03
- SSDEEP 393216:D0iWtacG34pE1jaumxWpzYYdQQ9V+3KNmHdEzVEiOCAYyKezI1m+OeSgj2Bd:AiWhGRE5GzV9Ov6m+v2H
- TLSH T1E1A75A0252ACBDE1D03AA630D7BB8BF1C769AC955128C24F10D1FA477D3A793791B3A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-13_16bbb42cbcb79d6178dee734dedd9a25_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_16bbb42cbcb79d6178dee734dedd9a25_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260710-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_16bbb42cbcb79d6178dee734dedd9a25_glassworm_icedid_njrat_remcos_vidar
- Size 43.1MB
- SHA256 b9b2bcb8ba870ef50a7e6ac7edc3788619ba29c7c63b3a6ace684887059c6fa1
- MD5 16bbb42cbcb79d6178dee734dedd9a25
- SHA1 241d42d3f4f4df6cf1a681b8284f26c165a263e3
- SHA512 2cd0d9c79842f531d1eee9628ce9a1116bc08725ead1a89f5c5389e6673b1f9eda0dab6caeacda015cf1b770c43dd461ead1d53bd55e6f140c0c3cbc5b40aa03
- SSDEEP 393216:D0iWtacG34pE1jaumxWpzYYdQQ9V+3KNmHdEzVEiOCAYyKezI1m+OeSgj2Bd:AiWhGRE5GzV9Ov6m+v2H
- TLSH T1E1A75A0252ACBDE1D03AA630D7BB8BF1C769AC955128C24F10D1FA477D3A793791B3A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables Discord URL observed in first stage droppers