General
- Target glacier.exe
- Size 69.3MB
- Sample260907-e52p8sydqf
- SHA256 da0e6d5f09c8ed7e14fbfbccee24736dcd2d21dba3e899762a8e8d0b5e3a800c
- MD5 87219e6b2368e4219511e9582c867c73
- SHA1 b4ea6fa2cbb427d54f72c969980a22daff7e8450
- SHA512 537b2c6580a73456ff1f7e672f03cf29d9d748d0ac26c294102da84a4024ea7d742b8046bb064f82f0a52396022af50be1c358a0db51e80fbb2374c1f9256cb7
- SSDEEP 1572864:dejOYfFbCj24Ox9tSVR0AsjwZ+uyFXIrNXPRZsY+7mEi7:d4NbZLtSVfsEZoXIr21pi7
- TLSH T1DFF733D93EA8E0FEC460E6B37384ACAB591E46A00F4B1F34577446EEA49990C0F55B3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
glacier.exe
Resource
win11-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target glacier.exe
- Size 69.3MB
- SHA256 da0e6d5f09c8ed7e14fbfbccee24736dcd2d21dba3e899762a8e8d0b5e3a800c
- MD5 87219e6b2368e4219511e9582c867c73
- SHA1 b4ea6fa2cbb427d54f72c969980a22daff7e8450
- SHA512 537b2c6580a73456ff1f7e672f03cf29d9d748d0ac26c294102da84a4024ea7d742b8046bb064f82f0a52396022af50be1c358a0db51e80fbb2374c1f9256cb7
- SSDEEP 1572864:dejOYfFbCj24Ox9tSVR0AsjwZ+uyFXIrNXPRZsY+7mEi7:d4NbZLtSVfsEZoXIr21pi7
- TLSH T1DFF733D93EA8E0FEC460E6B37384ACAB591E46A00F4B1F34577446EEA49990C0F55B3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Looks for VMWare Tools registry key
-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.