General
- Target 2026-07-23_345797556e8f50d8fabac7f141de8d56_glassworm_icedid_remcos_stealc_vidar
- Size 17.9MB
- Sample260723-vhdmwsca75
- SHA256 31725980c4d10472bb6dc3c508f4369b0355ba4742ea6b17353e734efc4ba281
- MD5 345797556e8f50d8fabac7f141de8d56
- SHA1 2bbc247883f4dd831a7d23ebc80fb3fca6257170
- SHA512 43af126d0c645fcb0eb4b472b39054b5ac136bc26b4c37ac758851f3202ce118b8bb14fdfdcf0c31a7427b2655da014cac51c13fe06257c54efb9c6170b3c460
- SSDEEP 393216:PuuYd9HQNqf51qXqgCdh3wY6hZxseRDWe0sbMSdM/Agz:PvYd9qqh1qXJ7ZxRzbkAo
- TLSH T12E1712E6F695A365C00F6E34103AAC7067B3BC924659F36B7A90B1A51CF77538932B03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_345797556e8f50d8fabac7f141de8d56_glassworm_icedid_remcos_stealc_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_345797556e8f50d8fabac7f141de8d56_glassworm_icedid_remcos_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_345797556e8f50d8fabac7f141de8d56_glassworm_icedid_remcos_stealc_vidar
- Size 17.9MB
- SHA256 31725980c4d10472bb6dc3c508f4369b0355ba4742ea6b17353e734efc4ba281
- MD5 345797556e8f50d8fabac7f141de8d56
- SHA1 2bbc247883f4dd831a7d23ebc80fb3fca6257170
- SHA512 43af126d0c645fcb0eb4b472b39054b5ac136bc26b4c37ac758851f3202ce118b8bb14fdfdcf0c31a7427b2655da014cac51c13fe06257c54efb9c6170b3c460
- SSDEEP 393216:PuuYd9HQNqf51qXqgCdh3wY6hZxseRDWe0sbMSdM/Agz:PvYd9qqh1qXJ7ZxRzbkAo
- TLSH T12E1712E6F695A365C00F6E34103AAC7067B3BC924659F36B7A90B1A51CF77538932B03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE