General
- Target 2026-08-02_5dc5be52cd6f06f06af6bc3879a69049_glassworm_icedid_njrat_vidar
- Size 2.0MB
- Sample260802-w22dqsygpb
- SHA256 d70c9148a6620cade2c7fbb06a294b2070d1e9d9c69ae4b12303b4b7610a0dd9
- MD5 5dc5be52cd6f06f06af6bc3879a69049
- SHA1 099e943411a8b91e252b3c63765a0f199a6b5cb4
- SHA512 07494efd4901d42c415dfb337a3771b031a4d367fde6cfb532a32b90ed37a1a79b06a6fef614831d57164341793e8170fbe85cb847a0d0df8ef9ee1eab8eb85a
- SSDEEP 49152:T9WxbakRkmQ0FrAuTMl+obmzD0bRZPfz3ZSS:T9XBl+obmH0bR5ZS
- TLSH T143958C916694D5D6F322C874C0B1CFAFD1F57C350B21858B82E9B2BF5B3B7A52C29212
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_5dc5be52cd6f06f06af6bc3879a69049_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_5dc5be52cd6f06f06af6bc3879a69049_glassworm_icedid_njrat_vidar
- Size 2.0MB
- SHA256 d70c9148a6620cade2c7fbb06a294b2070d1e9d9c69ae4b12303b4b7610a0dd9
- MD5 5dc5be52cd6f06f06af6bc3879a69049
- SHA1 099e943411a8b91e252b3c63765a0f199a6b5cb4
- SHA512 07494efd4901d42c415dfb337a3771b031a4d367fde6cfb532a32b90ed37a1a79b06a6fef614831d57164341793e8170fbe85cb847a0d0df8ef9ee1eab8eb85a
- SSDEEP 49152:T9WxbakRkmQ0FrAuTMl+obmzD0bRZPfz3ZSS:T9XBl+obmH0bR5ZS
- TLSH T143958C916694D5D6F322C874C0B1CFAFD1F57C350B21858B82E9B2BF5B3B7A52C29212
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1