General
- Target 2026-07-30_6029ec9534060b854f58033d25e37670_glassworm_icedid_njrat_vidar
- Size 27.5MB
- Sample260730-dyk88sck2v
- SHA256 0071fb31d45191f7c2b81a9744b5c1fce98a6e608ef84fdb389145ad42f79ea8
- MD5 6029ec9534060b854f58033d25e37670
- SHA1 0be86b9c6d307a3021f455168b3800f3ebef5a45
- SHA512 f7096b23a755f81586c94906c7e3edb47bb4aa388c639f2af0f9ee3f6865b753883d9e9490e029b812994f380c2957f81029cb5af71f08b030d813c6d152a1f0
- SSDEEP 393216:O7XYX6XE8uHXGfW/D3upSIRSjgd/tOiUoHom:Yf5UoHx
- TLSH T117578D47AAEE85D9EA3680B6CD3547B9E371BC056F2187CB11083A266E737D04DB0739
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_6029ec9534060b854f58033d25e37670_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_6029ec9534060b854f58033d25e37670_glassworm_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_6029ec9534060b854f58033d25e37670_glassworm_icedid_njrat_vidar
- Size 27.5MB
- SHA256 0071fb31d45191f7c2b81a9744b5c1fce98a6e608ef84fdb389145ad42f79ea8
- MD5 6029ec9534060b854f58033d25e37670
- SHA1 0be86b9c6d307a3021f455168b3800f3ebef5a45
- SHA512 f7096b23a755f81586c94906c7e3edb47bb4aa388c639f2af0f9ee3f6865b753883d9e9490e029b812994f380c2957f81029cb5af71f08b030d813c6d152a1f0
- SSDEEP 393216:O7XYX6XE8uHXGfW/D3upSIRSjgd/tOiUoHom:Yf5UoHx
- TLSH T117578D47AAEE85D9EA3680B6CD3547B9E371BC056F2187CB11083A266E737D04DB0739
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE