General
- Target 2026-09-16_9926099b9f02577d234d898034583c52_glassworm_icedid_njrat_vidar
- Size 6.8MB
- Sample260916-mj478sae69
- SHA256 5e0583acaf8f715c153137c650d36fe239d0d8f7cd0784d31d6ffc35a167840f
- MD5 9926099b9f02577d234d898034583c52
- SHA1 693fbf4ad8896a87c68f3174dce070c4d6d71bb6
- SHA512 fbd2fa2d074dabf11171edd7f272a73856c999e75d2a015fcdf98b9f56c36188ddf0a972db9cfa11d898e2d390bc019d95c1889dde253f04e451e1e803b1e6d5
- SSDEEP 49152:fEXL9iol2DYzZ2Qc9q8ei0oimC/FPI2DCrCBIMWCvWbD72Hv1wOhLnis2b+RtAsX:fKaDSwFME7D7Kjjq0usjmqMhHk
- TLSH T12A666C39ABB4C1E5F9ABD83CA9778671FAB279510833530B89E1C21E6F336524D19331
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-16_9926099b9f02577d234d898034583c52_glassworm_icedid_njrat_vidar.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-16_9926099b9f02577d234d898034583c52_glassworm_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-16_9926099b9f02577d234d898034583c52_glassworm_icedid_njrat_vidar
- Size 6.8MB
- SHA256 5e0583acaf8f715c153137c650d36fe239d0d8f7cd0784d31d6ffc35a167840f
- MD5 9926099b9f02577d234d898034583c52
- SHA1 693fbf4ad8896a87c68f3174dce070c4d6d71bb6
- SHA512 fbd2fa2d074dabf11171edd7f272a73856c999e75d2a015fcdf98b9f56c36188ddf0a972db9cfa11d898e2d390bc019d95c1889dde253f04e451e1e803b1e6d5
- SSDEEP 49152:fEXL9iol2DYzZ2Qc9q8ei0oimC/FPI2DCrCBIMWCvWbD72Hv1wOhLnis2b+RtAsX:fKaDSwFME7D7Kjjq0usjmqMhHk
- TLSH T12A666C39ABB4C1E5F9ABD83CA9778671FAB279510833530B89E1C21E6F336524D19331
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.