General

  • Target
    2026-08-12_28d37ab3366ed818f34ba3cb1240d2ef_glassworm_icedid_njrat_vidar
  • Size 39.2MB
  • Sample260812-fb2ntaam7x
  • SHA256 1a8cdc2be71b29e8dd03b408b967aa5fc96be22fc25d9cd518dd8464a2c2fac0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Targets

    • Target
      2026-08-12_28d37ab3366ed818f34ba3cb1240d2ef_glassworm_icedid_njrat_vidar
    • Size 39.2MB
    • SHA256 1a8cdc2be71b29e8dd03b408b967aa5fc96be22fc25d9cd518dd8464a2c2fac0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    • Detects executables Discord URL observed in first stage droppers

    • Detects executables packed with VMProtect.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks