General

  • Target
    2026-07-20_527883ec8aefd506a0ade82d2b28aeb6_cobalt-strike_glassworm_icedid_njrat
  • Size 22.9MB
  • Sample260720-x8lsasc19p
  • SHA256 73a1d25aef40b4c04e98b22b4f54c4f19e5f14e4f1ee7fd24fd6331cf428caa8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 2026-07-20_527883ec8aefd506a0ade82d2b28aeb6_cobalt-strike_glassworm_icedid_njrat
    .exe 22.9MB
  • grabber.pyc
    .ps1 49KB

2026-07-20_527883ec8aefd506a0ade82d2b28aeb6_cobalt-strike_glassworm_icedid_njrat

  • IMPHASH 6fa035f8b6303572b0e86089c7fa7e2b
  • SHA256 73a1d25aef40b4c04e98b22b4f54c4f19e5f14e4f1ee7fd24fd6331cf428caa8
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
cd:1b:cf:65:72:cd:40:4e:57:7d:43:da:c5:97:3b:82:9e:e0:aa:63:00:e1:8f:9d:2b:e1:4f:59:9a:4a:a5:6b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=Windows Update,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Minor OS version
0
Major OS version
4
Entry point
5152
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths