General
- Target 2026-07-28_c9f47e4950a675e5cad6163fa3c6f3d2_glassworm_icedid_vidar
- Size 356KB
- Sample260728-e3zg4axhrc
- SHA256 0f746cd205b770c180ab140f204aeb2d954b53b5d78366f87e83e1aa22adfb94
- MD5 c9f47e4950a675e5cad6163fa3c6f3d2
- SHA1 bd5e4968171b07ff8d2813a88d9274ff80b67398
- SHA512 ea9d11caeab8caa3715aaabdf581d2314fc9f35d193b3630d711d4f9ecf72e3d3ea3c9c1ff12e1268efdbd5940e3779dc52e2a8f7ef680bb70e3c16b484e3789
- SSDEEP 6144:Kdbu1J7PCaXxMLGxKWR1mlkVl+lIzohdMxB+RNGrQLFR461+nO7zs0IBVL0:muqyxMLNplyon0BB
- TLSH T194743938BA65DCE4CB2FB1B489212E4551713C0B8730E69FA68525DB5E372D0EF3D928
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_c9f47e4950a675e5cad6163fa3c6f3d2_glassworm_icedid_vidar.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_c9f47e4950a675e5cad6163fa3c6f3d2_glassworm_icedid_vidar.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://webcdns.com:2083/static-directory/lt.mp3
Attributes
-
user_agent
Host: webcdns.com Connection: close Accept: image/* User-Agent: Mozilla/5.0 (Windows Phone 10.0; Android 6.0.1; Microsoft; RM-1152) AppleWebKit/537.36 (KHTML, like Gecko)
Targets
-
- Target 2026-07-28_c9f47e4950a675e5cad6163fa3c6f3d2_glassworm_icedid_vidar
- Size 356KB
- SHA256 0f746cd205b770c180ab140f204aeb2d954b53b5d78366f87e83e1aa22adfb94
- MD5 c9f47e4950a675e5cad6163fa3c6f3d2
- SHA1 bd5e4968171b07ff8d2813a88d9274ff80b67398
- SHA512 ea9d11caeab8caa3715aaabdf581d2314fc9f35d193b3630d711d4f9ecf72e3d3ea3c9c1ff12e1268efdbd5940e3779dc52e2a8f7ef680bb70e3c16b484e3789
- SSDEEP 6144:Kdbu1J7PCaXxMLGxKWR1mlkVl+lIzohdMxB+RNGrQLFR461+nO7zs0IBVL0:muqyxMLNplyon0BB
- TLSH T194743938BA65DCE4CB2FB1B489212E4551713C0B8730E69FA68525DB5E372D0EF3D928
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.