General
- Target 2026-07-22_5bc7e49bcca6a684584ff6c6d1fc9d5c_glassworm_icedid_njrat_vidar
- Size 9.2MB
- Sample260722-wcmjaa1bjb
- SHA256 a2463c5d7231965975cadad50a0fb0f2acdcecddcf943270120b4787be749b0e
- MD5 5bc7e49bcca6a684584ff6c6d1fc9d5c
- SHA1 721d024c5d3c3e80646c466d16aec8b93f6de0a7
- SHA512 8b4ba7c3302ff4112a880ff98c39c5b3e9ce5e6517c8ddfbb903af6a8c0b6ad58fb1a41bbdc90d0b272df1de8229d024d5a895aa7dd4a4083f3178216f9714a6
- SSDEEP 98304:lwiEl4G35xGiPx+avS/OsEP3jaEZqWSxhxtCexCPA/mDXtd2CNDU:lwiEi25xGsS/4rUWtoeDXP2C5
- TLSH T1D5A68C5367B840D8D1A7C13A85A3860BE7B2BC511B3987EF3069971E2F336E14D7A361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_5bc7e49bcca6a684584ff6c6d1fc9d5c_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_5bc7e49bcca6a684584ff6c6d1fc9d5c_glassworm_icedid_njrat_vidar
- Size 9.2MB
- SHA256 a2463c5d7231965975cadad50a0fb0f2acdcecddcf943270120b4787be749b0e
- MD5 5bc7e49bcca6a684584ff6c6d1fc9d5c
- SHA1 721d024c5d3c3e80646c466d16aec8b93f6de0a7
- SHA512 8b4ba7c3302ff4112a880ff98c39c5b3e9ce5e6517c8ddfbb903af6a8c0b6ad58fb1a41bbdc90d0b272df1de8229d024d5a895aa7dd4a4083f3178216f9714a6
- SSDEEP 98304:lwiEl4G35xGiPx+avS/OsEP3jaEZqWSxhxtCexCPA/mDXtd2CNDU:lwiEi25xGsS/4rUWtoeDXP2C5
- TLSH T1D5A68C5367B840D8D1A7C13A85A3860BE7B2BC511B3987EF3069971E2F336E14D7A361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1