General
- Target 2026-08-02_ec7f57198a5c4b5161e5fb6eeb06c8d3_glassworm_icedid_vidar
- Size 1.4MB
- Sample260802-jmlnhsxfma
- SHA256 2bfe8d9e9c93f58a38ddc67cfd86322b67d549d0f8e43e3035363f032befe423
- MD5 ec7f57198a5c4b5161e5fb6eeb06c8d3
- SHA1 3967308fa0ae71a1d2e657c1dfabeed2e27f1be4
- SHA512 8b8a16b60d3ac52851c9a4c438d296a12db05309a7396bfd933797543e1bdc250abf1fe151e0584d43b7e45f842d6ad1197bd746a7db2900d81be64add3e0e67
- SSDEEP 12288:pvd4daxmiyTlTRTUpThTNTs51GRtVB3ZsrEtJUyMNlPfz9J4FxS2JhCXyTlTRTUS:X/AOsPlPfC2AOs8a16Gl
- TLSH T1F865182223FC452AE1F76B75947506209BF6FC86BB35D79E0698456C0E73B809EA0733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_ec7f57198a5c4b5161e5fb6eeb06c8d3_glassworm_icedid_vidar.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_ec7f57198a5c4b5161e5fb6eeb06c8d3_glassworm_icedid_vidar.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_ec7f57198a5c4b5161e5fb6eeb06c8d3_glassworm_icedid_vidar
- Size 1.4MB
- SHA256 2bfe8d9e9c93f58a38ddc67cfd86322b67d549d0f8e43e3035363f032befe423
- MD5 ec7f57198a5c4b5161e5fb6eeb06c8d3
- SHA1 3967308fa0ae71a1d2e657c1dfabeed2e27f1be4
- SHA512 8b8a16b60d3ac52851c9a4c438d296a12db05309a7396bfd933797543e1bdc250abf1fe151e0584d43b7e45f842d6ad1197bd746a7db2900d81be64add3e0e67
- SSDEEP 12288:pvd4daxmiyTlTRTUpThTNTs51GRtVB3ZsrEtJUyMNlPfz9J4FxS2JhCXyTlTRTUS:X/AOsPlPfC2AOs8a16Gl
- TLSH T1F865182223FC452AE1F76B75947506209BF6FC86BB35D79E0698456C0E73B809EA0733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks whether UAC is enabled