General
- Target 2026-08-12_47f02eef0dc5a3479a8047e172ddfefc_glassworm_icedid_njrat_vidar
- Size 44.1MB
- Sample260813-bnf6esxthw
- SHA256 fafd0a77a91e2b40806ce88f33ecc99c148e01ebee67769f0fe15ac096f8cf6e
- MD5 47f02eef0dc5a3479a8047e172ddfefc
- SHA1 dbe2fcac947322fa8b9591581682080a8daec920
- SHA512 26764238a6eb04407844f1be5b93a1e8af556d19f1877c041d513c27f5104d0b527889dc2492581ba8d8f3eebd4b934831259755a19087f5f7ee32fd88b38251
- SSDEEP 393216:cW3biLa3L9NJ7W51AmOW1ZEk3Jp5LaA0iAfIpMcJuIiAH8mLgsXHJtd4xGXRqeKk:t3biGRN1+qbwewbkvisg/1
- TLSH T158A74A4652A8BDD2C432A130D7BB8FF1C769EC559229C24F1081FE573D3A752B92B2E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-12_47f02eef0dc5a3479a8047e172ddfefc_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_47f02eef0dc5a3479a8047e172ddfefc_glassworm_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_47f02eef0dc5a3479a8047e172ddfefc_glassworm_icedid_njrat_vidar
- Size 44.1MB
- SHA256 fafd0a77a91e2b40806ce88f33ecc99c148e01ebee67769f0fe15ac096f8cf6e
- MD5 47f02eef0dc5a3479a8047e172ddfefc
- SHA1 dbe2fcac947322fa8b9591581682080a8daec920
- SHA512 26764238a6eb04407844f1be5b93a1e8af556d19f1877c041d513c27f5104d0b527889dc2492581ba8d8f3eebd4b934831259755a19087f5f7ee32fd88b38251
- SSDEEP 393216:cW3biLa3L9NJ7W51AmOW1ZEk3Jp5LaA0iAfIpMcJuIiAH8mLgsXHJtd4xGXRqeKk:t3biGRN1+qbwewbkvisg/1
- TLSH T158A74A4652A8BDD2C432A130D7BB8FF1C769EC559229C24F1081FE573D3A752B92B2E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables (downlaoders) containing URLs to raw contents of a paste
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.