General
- Target 2026-07-31_00ee758a89f4534332462460e207ddab_glassworm_icedid_njrat_vidar
- Size 1.6MB
- Sample260731-d62aestbla
- SHA256 65c48cb2ce45aed8c7b28436077c916efc6306c000b33fa693958b20b84aa865
- MD5 00ee758a89f4534332462460e207ddab
- SHA1 0b695e4b7809d5c51761cb6a42db8f2e0748b760
- SHA512 60e9b663b80ea0e337a058814666670d2821658e8f36f5cd2877ece7dec17e9daf53cb932d285fb3daa16198beddb6ce74560cf042bb3a2f935076a13d2af4f8
- SSDEEP 24576:hN4j9kouZ5aol0e8owUi6Nw7PG29ufISFvA1sLWgif46pxE3cT9DWyJclo5BIK:hN4JTuWol0e8owUi6NY1sLSsmdy3Bi
- TLSH T1E3757C5AA7F810E4D1BFC178C557461BF6B2B425132097CB16A087BA6F23BD06B3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_00ee758a89f4534332462460e207ddab_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_00ee758a89f4534332462460e207ddab_glassworm_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_00ee758a89f4534332462460e207ddab_glassworm_icedid_njrat_vidar
- Size 1.6MB
- SHA256 65c48cb2ce45aed8c7b28436077c916efc6306c000b33fa693958b20b84aa865
- MD5 00ee758a89f4534332462460e207ddab
- SHA1 0b695e4b7809d5c51761cb6a42db8f2e0748b760
- SHA512 60e9b663b80ea0e337a058814666670d2821658e8f36f5cd2877ece7dec17e9daf53cb932d285fb3daa16198beddb6ce74560cf042bb3a2f935076a13d2af4f8
- SSDEEP 24576:hN4j9kouZ5aol0e8owUi6Nw7PG29ufISFvA1sLWgif46pxE3cT9DWyJclo5BIK:hN4JTuWol0e8owUi6NY1sLSsmdy3Bi
- TLSH T1E3757C5AA7F810E4D1BFC178C557461BF6B2B425132097CB16A087BA6F23BD06B3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext