General
- Target 2026-07-30_a5735de60efb820844a46ccc5b0996b9_glassworm_icedid_njrat_vidar
- Size 45.8MB
- Sample260730-hltr3asgkb
- SHA256 d15d4725e3c94c33b6776ebe5dcebe1c06dbab11fff181d2063196115ea52ff1
- MD5 a5735de60efb820844a46ccc5b0996b9
- SHA1 43140f6da45dc5423442890ccae5d8b602312597
- SHA512 5e3c2f5089bb8a65da89705197e045fff2b4461ebdc186866e1b05e7e6a3e4efc12f04c25524b7f2b5e5e2d6bcd582325b6d47c518fab094bfa6c4052ca39ae3
- SSDEEP 393216:2W3biLa3L9NJ7W51AmOW1ZEk3Jp5LaA0iwhCsMgkYfk79Xxymw8GBRjXCme4bM7P:v3biGRN1+qbwewbkviGk37KZHFc
- TLSH T185B75A4252EC7DD1C432B230E7BB8FF2C669AC559228825F1095FA473D3A742792B7E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-30_a5735de60efb820844a46ccc5b0996b9_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_a5735de60efb820844a46ccc5b0996b9_glassworm_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_a5735de60efb820844a46ccc5b0996b9_glassworm_icedid_njrat_vidar
- Size 45.8MB
- SHA256 d15d4725e3c94c33b6776ebe5dcebe1c06dbab11fff181d2063196115ea52ff1
- MD5 a5735de60efb820844a46ccc5b0996b9
- SHA1 43140f6da45dc5423442890ccae5d8b602312597
- SHA512 5e3c2f5089bb8a65da89705197e045fff2b4461ebdc186866e1b05e7e6a3e4efc12f04c25524b7f2b5e5e2d6bcd582325b6d47c518fab094bfa6c4052ca39ae3
- SSDEEP 393216:2W3biLa3L9NJ7W51AmOW1ZEk3Jp5LaA0iwhCsMgkYfk79Xxymw8GBRjXCme4bM7P:v3biGRN1+qbwewbkviGk37KZHFc
- TLSH T185B75A4252EC7DD1C432B230E7BB8FF2C669AC559228825F1095FA473D3A742792B7E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables (downlaoders) containing URLs to raw contents of a paste
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.