General
- Target 2026-08-11_8fab7185805855d285bd25b7255aac71_glassworm_icedid
- Size 9.6MB
- Sample260811-c9tt3stfng
- SHA256 03192ca7e9f1ddf7a4b66f32c9c29464c1d9cb4fef12a5a5e5bc8af14b77edd2
- MD5 8fab7185805855d285bd25b7255aac71
- SHA1 a2f728bd1dbb2fad42708bfc2ea999fca2909a68
- SHA512 0ada63b18b63ed8b493c2f4f125364fb21820880f72623cf39702565b2550fdb2fa05f6f680f21aae15b8f73761241ea2560564eacfc2f3749e60b1670d20c0f
- SSDEEP 98304:MAPMlYrX82iMp4Oqc/Qin7AKjMQlV2689wn2QKo3qq3J:MAks82iMph/37XQfwn2QKqj3J
- TLSH T1E2A69E09E39009E4D927D634CD65C732DBB8BC617630928F11A4F6CA6F73A618F6F624
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-11_8fab7185805855d285bd25b7255aac71_glassworm_icedid.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_8fab7185805855d285bd25b7255aac71_glassworm_icedid.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_8fab7185805855d285bd25b7255aac71_glassworm_icedid
- Size 9.6MB
- SHA256 03192ca7e9f1ddf7a4b66f32c9c29464c1d9cb4fef12a5a5e5bc8af14b77edd2
- MD5 8fab7185805855d285bd25b7255aac71
- SHA1 a2f728bd1dbb2fad42708bfc2ea999fca2909a68
- SHA512 0ada63b18b63ed8b493c2f4f125364fb21820880f72623cf39702565b2550fdb2fa05f6f680f21aae15b8f73761241ea2560564eacfc2f3749e60b1670d20c0f
- SSDEEP 98304:MAPMlYrX82iMp4Oqc/Qin7AKjMQlV2689wn2QKo3qq3J:MAks82iMph/37XQfwn2QKqj3J
- TLSH T1E2A69E09E39009E4D927D634CD65C732DBB8BC617630928F11A4F6CA6F73A618F6F624
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Obfuscated Files or Information: Command Obfuscation
Adversaries may obfuscate content during command execution to impede detection.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1