Analysis
- max time kernel
149s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
10/09/2026, 14:07
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-10_8a2541e8262b8699136a9aad93fd57db_coinminer_glassworm_icedid_njrat_poet-rat_vidar.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_8a2541e8262b8699136a9aad93fd57db_coinminer_glassworm_icedid_njrat_poet-rat_vidar.exe
Resource
win11ltsc2024-20260709-en
21 signatures
150 seconds
General
- Target 2026-09-10_8a2541e8262b8699136a9aad93fd57db_coinminer_glassworm_icedid_njrat_poet-rat_vidar.exe
- Size 25.4MB
- Sample260910-re2nrsvbme
- SHA256 90c0f3f57334375222672901fbfcddbb1133331699cdcc917c6f9ee87fab862d
- MD5 8a2541e8262b8699136a9aad93fd57db
- SHA1 eeed524c151cced1572a54d6f951363f47269e06
- SHA512 3e77bc17de67df22cdae70f19adce2514d80e454d230f62a143fecf91d0a33a3e1cc237c18c1f620821d19397667414ebb93fb5ed488eb730ffd034d4c5188cf
- SSDEEP 49152:/KL3W0A0vr9cusmglhowk8s0nHQh6/q/5ci7CbaZk9t5BCHqO3eu/1fef/h5B46W:SjAIMaQi7kmeHh2yeH7rkfvVsX+Nm
- TLSH T1AA47E6117317E99DE1B753BA048B0F50F725E8B41970977323B8916C5FEAB0CBAB2924
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 32 IoCs
pid Process 1748 2026-09-10_8a2541e8262b8699136a9aad93fd57db_coinminer_glassworm_icedid_njrat_poet-rat_vidar.exe 1748 2026-09-10_8a2541e8262b8699136a9aad93fd57db_coinminer_glassworm_icedid_njrat_poet-rat_vidar.exe 1748 2026-09-10_8a2541e8262b8699136a9aad93fd57db_coinminer_glassworm_icedid_njrat_poet-rat_vidar.exe 1748 2026-09-10_8a2541e8262b8699136a9aad93fd57db_coinminer_glassworm_icedid_njrat_poet-rat_vidar.exe 1748 2026-09-10_8a2541e8262b8699136a9aad93fd57db_coinminer_glassworm_icedid_njrat_poet-rat_vidar.exe 1748 2026-09-10_8a2541e8262b8699136a9aad93fd57db_coinminer_glassworm_icedid_njrat_poet-rat_vidar.exe 1748 2026-09-10_8a2541e8262b8699136a9aad93fd57db_coinminer_glassworm_icedid_njrat_poet-rat_vidar.exe 1748 2026-09-10_8a2541e8262b8699136a9aad93fd57db_coinminer_glassworm_icedid_njrat_poet-rat_vidar.exe 1748 2026-09-10_8a2541e8262b8699136a9aad93fd57db_coinminer_glassworm_icedid_njrat_poet-rat_vidar.exe 1748 2026-09-10_8a2541e8262b8699136a9aad93fd57db_coinminer_glassworm_icedid_njrat_poet-rat_vidar.exe 1748 2026-09-10_8a2541e8262b8699136a9aad93fd57db_coinminer_glassworm_icedid_njrat_poet-rat_vidar.exe 1748 2026-09-10_8a2541e8262b8699136a9aad93fd57db_coinminer_glassworm_icedid_njrat_poet-rat_vidar.exe 1748 2026-09-10_8a2541e8262b8699136a9aad93fd57db_coinminer_glassworm_icedid_njrat_poet-rat_vidar.exe 1748 2026-09-10_8a2541e8262b8699136a9aad93fd57db_coinminer_glassworm_icedid_njrat_poet-rat_vidar.exe 1748 2026-09-10_8a2541e8262b8699136a9aad93fd57db_coinminer_glassworm_icedid_njrat_poet-rat_vidar.exe 1748 2026-09-10_8a2541e8262b8699136a9aad93fd57db_coinminer_glassworm_icedid_njrat_poet-rat_vidar.exe 1748 2026-09-10_8a2541e8262b8699136a9aad93fd57db_coinminer_glassworm_icedid_njrat_poet-rat_vidar.exe 1748 2026-09-10_8a2541e8262b8699136a9aad93fd57db_coinminer_glassworm_icedid_njrat_poet-rat_vidar.exe 1748 2026-09-10_8a2541e8262b8699136a9aad93fd57db_coinminer_glassworm_icedid_njrat_poet-rat_vidar.exe 1748 2026-09-10_8a2541e8262b8699136a9aad93fd57db_coinminer_glassworm_icedid_njrat_poet-rat_vidar.exe 1748 2026-09-10_8a2541e8262b8699136a9aad93fd57db_coinminer_glassworm_icedid_njrat_poet-rat_vidar.exe 1748 2026-09-10_8a2541e8262b8699136a9aad93fd57db_coinminer_glassworm_icedid_njrat_poet-rat_vidar.exe 1748 2026-09-10_8a2541e8262b8699136a9aad93fd57db_coinminer_glassworm_icedid_njrat_poet-rat_vidar.exe 1748 2026-09-10_8a2541e8262b8699136a9aad93fd57db_coinminer_glassworm_icedid_njrat_poet-rat_vidar.exe 1748 2026-09-10_8a2541e8262b8699136a9aad93fd57db_coinminer_glassworm_icedid_njrat_poet-rat_vidar.exe 1748 2026-09-10_8a2541e8262b8699136a9aad93fd57db_coinminer_glassworm_icedid_njrat_poet-rat_vidar.exe 1748 2026-09-10_8a2541e8262b8699136a9aad93fd57db_coinminer_glassworm_icedid_njrat_poet-rat_vidar.exe 1748 2026-09-10_8a2541e8262b8699136a9aad93fd57db_coinminer_glassworm_icedid_njrat_poet-rat_vidar.exe 1748 2026-09-10_8a2541e8262b8699136a9aad93fd57db_coinminer_glassworm_icedid_njrat_poet-rat_vidar.exe 1748 2026-09-10_8a2541e8262b8699136a9aad93fd57db_coinminer_glassworm_icedid_njrat_poet-rat_vidar.exe 1748 2026-09-10_8a2541e8262b8699136a9aad93fd57db_coinminer_glassworm_icedid_njrat_poet-rat_vidar.exe 1748 2026-09-10_8a2541e8262b8699136a9aad93fd57db_coinminer_glassworm_icedid_njrat_poet-rat_vidar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-10_8a2541e8262b8699136a9aad93fd57db_coinminer_glassworm_icedid_njrat_poet-rat_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-10_8a2541e8262b8699136a9aad93fd57db_coinminer_glassworm_icedid_njrat_poet-rat_vidar.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1748