6527418873675308dd93fca64d6c17175a54ed00684a26be11e2dc6224eba7fb | Triage™

Login
Reports

Overview

overview

7

Static

static

3

2026-09-29...id.exe

windows10-2004-x64

7

2026-09-29...id.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-29_1eee39855e2a91e21af0c61d62b46020_glassworm_icedid
Size 1018KB
Sample260930-e9sccseg84
SHA256 6527418873675308dd93fca64d6c17175a54ed00684a26be11e2dc6224eba7fb
MD5 1eee39855e2a91e21af0c61d62b46020
SHA1 55d23a65c8dcecc06b351b4d65ecf2690d2a34f7
SHA512 279d7d69df7a050ef7fb0e62c27fd553cada6c5fcfaf4690162718d1b821ee6555a79ac548ff49df7519f6d6908ddfa32fad5c6c9e3bec510770177d3abc7ad6
SSDEEP 12288:78e+aJ4dCXzRKX4EcJupbSRi461R1VcrP3224c+iKmDRkRFNBMUFeA+imQ269pR/:7caJ4dCXzRKX4EcJAD1RrQz
TLSH
T17525701123E9421AF5F36B79D97502709BB6BE967A38C2CE069474BD0D72BC4C9A0337
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution persistence trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-09-29_1eee39855e2a91e21af0c61d62b46020_glassworm_icedid.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

16 signatures

150 seconds

defense_evasion discovery execution persistence trojan

Behavioral task

behavioral2

Sample

2026-09-29_1eee39855e2a91e21af0c61d62b46020_glassworm_icedid.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

15 signatures

150 seconds

defense_evasion discovery execution persistence trojan

Malware Config

Targets

- Target
  2026-09-29_1eee39855e2a91e21af0c61d62b46020_glassworm_icedid
- Size 1018KB
- SHA256 6527418873675308dd93fca64d6c17175a54ed00684a26be11e2dc6224eba7fb
- MD5 1eee39855e2a91e21af0c61d62b46020
- SHA1 55d23a65c8dcecc06b351b4d65ecf2690d2a34f7
- SHA512 279d7d69df7a050ef7fb0e62c27fd553cada6c5fcfaf4690162718d1b821ee6555a79ac548ff49df7519f6d6908ddfa32fad5c6c9e3bec510770177d3abc7ad6
- SSDEEP 12288:78e+aJ4dCXzRKX4EcJupbSRi461R1VcrP3224c+iKmDRkRFNBMUFeA+imQ269pR/:7caJ4dCXzRKX4EcJAD1RrQz
- TLSH
  T17525701123E9421AF5F36B79D97502709BB6BE967A38C2CE069474BD0D72BC4C9A0337
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution persistence trojan
- Creates new service(s)
  persistence execution
- Executes dropped EXE
- Loads dropped DLL
- Stops running service(s)
  defense_evasion execution
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

defense_evasiondiscoveryexecutionpersistencetrojan

behavioral2

defense_evasiondiscoveryexecutionpersistencetrojan

© 2018-2026

Terms | Privacy