Analysis
- max time kernel
149s - max time network
155s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
21/07/2026, 16:53
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-21_a34e16582c977a50006a17fb4f4db425_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-21_a34e16582c977a50006a17fb4f4db425_glassworm_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 2026-07-21_a34e16582c977a50006a17fb4f4db425_glassworm_icedid_njrat_vidar.exe
- Size 37.7MB
- Sample260721-vd2txser7x
- SHA256 c691d9a1714cb897a92bce9a6337aadc389f4589be82d26272b660bd3e375370
- MD5 a34e16582c977a50006a17fb4f4db425
- SHA1 6e274e8f5a9093a003362a90a8d5156f9ca70d42
- SHA512 4910fa2809826765b467e69f3e42b60fe2cf4967634a767bb624bce36e1b41cdb9c5705ce6ccb851e477771570084afb1e7d9511ef4675c004189919c128e213
- SSDEEP 393216:CFL3FIsC6Aj+dm1QGG80ifZVXvDAEAixmPDR26W8m4Q0oeTGlFpI+yUThaaAfN:ILAjUm6/LizNDFeTG62zAfN
- TLSH T13D873A0252A87CE1C436A130E7BB8FF1C769EC55A628C25F1091FA473D3A792791B3E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Malware Config
Signatures
- Custom signatureDetects executables manipulated with Fody 1 IoCs
resource yara_rule behavioral2/memory/2712-2-0x0000021D564D0000-0x0000021D58A90000-memory.dmp INDICATOR_EXE_Packed_Fody - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS 2026-07-21_a34e16582c977a50006a17fb4f4db425_glassworm_icedid_njrat_vidar.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer 2026-07-21_a34e16582c977a50006a17fb4f4db425_glassworm_icedid_njrat_vidar.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemVersion 2026-07-21_a34e16582c977a50006a17fb4f4db425_glassworm_icedid_njrat_vidar.exe