General
- Target 2026-08-03_c948ef51684c3f6097df2be951df87f0_glassworm_helldown_icedid_njrat_quasar-rat_vidar
- Size 10.8MB
- Sample260804-lrc82sxaph
- SHA256 0a25cde85dc0382698574afd330f35418dd5749e9809139d439ccab6609f8871
- MD5 c948ef51684c3f6097df2be951df87f0
- SHA1 11d8a356676852ea34c7a9dad53e3917a84c407a
- SHA512 625086c6de959dbf3be8b56dac254ff281e4353d7174d9bd431b67740e3f4353cb51687611d6ec4040559d17891c74e09024f70205d840ca30b46b70f4446e25
- SSDEEP 98304:yAYAeW2V1RMA8W07mnHhQPiRdeouf+3VQrqNoS7pOaI1zakO8s:yAYrWkRMgZzG+3VQrqNoSdp
- TLSH T12AB68D033AE684A9C9D3D338C5979727F771BD654A359B1B1691A62E2F333E09D2E300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-03_c948ef51684c3f6097df2be951df87f0_glassworm_helldown_icedid_njrat_quasar-rat_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_c948ef51684c3f6097df2be951df87f0_glassworm_helldown_icedid_njrat_quasar-rat_vidar.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_c948ef51684c3f6097df2be951df87f0_glassworm_helldown_icedid_njrat_quasar-rat_vidar
- Size 10.8MB
- SHA256 0a25cde85dc0382698574afd330f35418dd5749e9809139d439ccab6609f8871
- MD5 c948ef51684c3f6097df2be951df87f0
- SHA1 11d8a356676852ea34c7a9dad53e3917a84c407a
- SHA512 625086c6de959dbf3be8b56dac254ff281e4353d7174d9bd431b67740e3f4353cb51687611d6ec4040559d17891c74e09024f70205d840ca30b46b70f4446e25
- SSDEEP 98304:yAYAeW2V1RMA8W07mnHhQPiRdeouf+3VQrqNoS7pOaI1zakO8s:yAYrWkRMgZzG+3VQrqNoSdp
- TLSH T12AB68D033AE684A9C9D3D338C5979727F771BD654A359B1B1691A62E2F333E09D2E300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Loads dropped DLL