General

  • Target
    2026-07-31_24396c55273c65e62bce6c8af1768c12_cobalt-strike_glassworm_hijackloader_icedid_njrat_vidar
  • Size 3.3MB
  • Sample260801-afpl6atdkh
  • SHA256 c0fe92496afb1c265b462352e93b703b2b3baea9ff2995181821981e49cff491
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • 2026-07-31_24396c55273c65e62bce6c8af1768c12_cobalt-strike_glassworm_hijackloader_icedid_njrat_vidar
    .exe 3.3MB

2026-07-31_24396c55273c65e62bce6c8af1768c12_cobalt-strike_glassworm_hijackloader_icedid_njrat_vidar

  • IMPHASH 675c2709d88f078c0bedff69202449b4
  • SHA256 c0fe92496afb1c265b462352e93b703b2b3baea9ff2995181821981e49cff491
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
fd:c5:02:75:87:84:99:86:09:57:9f:0f:d6:c9:69:06:bb:01:01:6a
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=91310104570823308M,CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,STREET=徐汇区沪闵路9818号1幢543室,L=上海市,ST=上海市,C=CN,1.3.6.1.4.1.311.60.2.1.2=#13085348414e47484149,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

PE Signature issue

Digest
f3:e5:21:71:77:d0:92:a4:75:9b:cb:2b:4b:c3:d0:22:11:5d:16:b9:ce:dd:a0:e5:6a:94:32:b5:0a:8d:08:80
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=91310104570823308M,CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,STREET=徐汇区沪闵路9818号1幢543室,L=上海市,ST=上海市,C=CN,1.3.6.1.4.1.311.60.2.1.2=#13085348414e47484149,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Minor OS version
0
Major OS version
6
Entry point
1642728
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths