General
- Target 2026-07-31_d4a833e2c8c58cb8bd22a4b6e972ca6b_glassworm_icedid_njrat_vidar
- Size 1.6MB
- Sample260731-czktest1as
- SHA256 01f98aed9690267a93492d077f8c762c14f5a6b99f4ed3e72828284c45c66ee6
- MD5 d4a833e2c8c58cb8bd22a4b6e972ca6b
- SHA1 ede51bc9b085c759010a58d1ef56adbd42e387f5
- SHA512 b24166b0949c3ff38b40460d24ebf3cb2b1778ddbd349308a2062ebd4b0aced938582f8530204f9982d9db704426912c9d911a358bf39a245bf0a787b6d5aa81
- SSDEEP 49152:ov8odu6DUdkjuYl95VUjBvLSsmTy3oCy:ov8oidkjuYl95VUjpICy
- TLSH T193757C6AA7F810E4D1BFC178C5574617F6B2B429132097CB16A087BA5F23BD06B3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_d4a833e2c8c58cb8bd22a4b6e972ca6b_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_d4a833e2c8c58cb8bd22a4b6e972ca6b_glassworm_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_d4a833e2c8c58cb8bd22a4b6e972ca6b_glassworm_icedid_njrat_vidar
- Size 1.6MB
- SHA256 01f98aed9690267a93492d077f8c762c14f5a6b99f4ed3e72828284c45c66ee6
- MD5 d4a833e2c8c58cb8bd22a4b6e972ca6b
- SHA1 ede51bc9b085c759010a58d1ef56adbd42e387f5
- SHA512 b24166b0949c3ff38b40460d24ebf3cb2b1778ddbd349308a2062ebd4b0aced938582f8530204f9982d9db704426912c9d911a358bf39a245bf0a787b6d5aa81
- SSDEEP 49152:ov8odu6DUdkjuYl95VUjBvLSsmTy3oCy:ov8oidkjuYl95VUjpICy
- TLSH T193757C6AA7F810E4D1BFC178C5574617F6B2B429132097CB16A087BA5F23BD06B3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext