General
- Target 2026-07-21_a793bf34f7e6e18dc196450b5699a16b_cobalt-strike_glassworm_icedid_njrat_vidar
- Size 26.8MB
- Sample260722-a9b8xshb85
- SHA256 ce6baf1317cd2444c560be7695d257d4bc35717e703680fe86bfa8b4236a10f9
- MD5 a793bf34f7e6e18dc196450b5699a16b
- SHA1 97189b7bef50e695d2a721c674b88f9411eb42d9
- SHA512 c4bb6d53cefc5663c6f793db251fad72b39e853dc9e7c56648246ed8556e0d4156179f126fdee2bbe1eae25a38ec04b8ba8b63744bc0f3046857a32f121e762c
- SSDEEP 196608:u08m0WCDlRXDTT/g1Yiq90AGcDkP6pUjx+tOsS0i1w3ArqrUEu:ZoXDl5DPmYiydDkP6pHOstGwQrZ
- TLSH T1BD579E127743A4BCCD5AC4B0829A56725A1030DB1B31FDFF46A5E6392E39BF81F35628
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_a793bf34f7e6e18dc196450b5699a16b_cobalt-strike_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-21_a793bf34f7e6e18dc196450b5699a16b_cobalt-strike_glassworm_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_a793bf34f7e6e18dc196450b5699a16b_cobalt-strike_glassworm_icedid_njrat_vidar
- Size 26.8MB
- SHA256 ce6baf1317cd2444c560be7695d257d4bc35717e703680fe86bfa8b4236a10f9
- MD5 a793bf34f7e6e18dc196450b5699a16b
- SHA1 97189b7bef50e695d2a721c674b88f9411eb42d9
- SHA512 c4bb6d53cefc5663c6f793db251fad72b39e853dc9e7c56648246ed8556e0d4156179f126fdee2bbe1eae25a38ec04b8ba8b63744bc0f3046857a32f121e762c
- SSDEEP 196608:u08m0WCDlRXDTT/g1Yiq90AGcDkP6pUjx+tOsS0i1w3ArqrUEu:ZoXDl5DPmYiydDkP6pHOstGwQrZ
- TLSH T1BD579E127743A4BCCD5AC4B0829A56725A1030DB1B31FDFF46A5E6392E39BF81F35628
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of NtSetInformationThreadHideFromDebugger