General
- Target 2026-08-30_def889241395b1f00a5f6109489ab690_glassworm_icedid_njrat_vidar
- Size 39.4MB
- Sample260831-c965eateqe
- SHA256 b6ebfcd095e3d1ae7c1aaed05cdf767810dda7520a7fdedce0fea02bf7bd857e
- MD5 def889241395b1f00a5f6109489ab690
- SHA1 8f672c810499ae5d0db80813af5fd42fc6c1646f
- SHA512 5c6a3b3c113c7d1392bbe3a909919afdd05ad6c731cbf1146150768fa3dbc63b72fe55610bf11abd1da5a6d86b5641c79d6ea62ff0b82b48b8f95aa9cac8fe0d
- SSDEEP 393216:ddK5zTN7WuyOdeA7vOjiMNRXQX7Pr8YtJhzLK2IZR:dCyOdeA7UNRXQLPr8EJhzLKTT
- TLSH T133973A0216EDBDC7E1731631ABBB8AF0862EFC65A604C25F00913B1F6C35642BD657B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-30_def889241395b1f00a5f6109489ab690_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-30_def889241395b1f00a5f6109489ab690_glassworm_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_def889241395b1f00a5f6109489ab690_glassworm_icedid_njrat_vidar
- Size 39.4MB
- SHA256 b6ebfcd095e3d1ae7c1aaed05cdf767810dda7520a7fdedce0fea02bf7bd857e
- MD5 def889241395b1f00a5f6109489ab690
- SHA1 8f672c810499ae5d0db80813af5fd42fc6c1646f
- SHA512 5c6a3b3c113c7d1392bbe3a909919afdd05ad6c731cbf1146150768fa3dbc63b72fe55610bf11abd1da5a6d86b5641c79d6ea62ff0b82b48b8f95aa9cac8fe0d
- SSDEEP 393216:ddK5zTN7WuyOdeA7vOjiMNRXQX7Pr8YtJhzLK2IZR:dCyOdeA7UNRXQLPr8EJhzLKTT
- TLSH T133973A0216EDBDC7E1731631ABBB8AF0862EFC65A604C25F00913B1F6C35642BD657B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with VMProtect.
-
Loads dropped DLL
-
Suspicious use of NtSetInformationThreadHideFromDebugger