a8953a4b92f49251c774d0f4150be808a9aa834ecbe28ae9a32a1004c4810810 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

2026-10-01...id.exe

windows10-2004-x64

7

2026-10-01...id.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-01_6d831a9b10b467adf7d0fc22805a5861_glassworm_icedid
Size 1018KB
Sample261002-psep2svs8q
SHA256 a8953a4b92f49251c774d0f4150be808a9aa834ecbe28ae9a32a1004c4810810
MD5 6d831a9b10b467adf7d0fc22805a5861
SHA1 ac6f05a9ac74e67fc0fc83574d8a4f60cf28f075
SHA512 a6bc765a3ea18a6fa04879ffbc56d3a8edaa3b0d7c289cc7ee52594439e748b314fe361d131324b50cfb2cc8851b4febf29bad08d4b24460f8efb243eac6236d
SSDEEP 12288:O8e+aJ4dCXzRKX4EcJupbSRi461R1VcrP3224c+iKmDRkRFNBMUFeA+imQ269pR/:OcaJ4dCXzRKX4EcJAD1RrQz
TLSH
T12A25701123E9421AF5F36B79D97502709BB6BE967A38C2CE069474BD0D72BC4C9A0337
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution persistence trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-10-01_6d831a9b10b467adf7d0fc22805a5861_glassworm_icedid.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

16 signatures

150 seconds

defense_evasion discovery execution persistence trojan

Behavioral task

behavioral2

Sample

2026-10-01_6d831a9b10b467adf7d0fc22805a5861_glassworm_icedid.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

15 signatures

150 seconds

defense_evasion discovery execution persistence trojan

Malware Config

Targets

- Target
  2026-10-01_6d831a9b10b467adf7d0fc22805a5861_glassworm_icedid
- Size 1018KB
- SHA256 a8953a4b92f49251c774d0f4150be808a9aa834ecbe28ae9a32a1004c4810810
- MD5 6d831a9b10b467adf7d0fc22805a5861
- SHA1 ac6f05a9ac74e67fc0fc83574d8a4f60cf28f075
- SHA512 a6bc765a3ea18a6fa04879ffbc56d3a8edaa3b0d7c289cc7ee52594439e748b314fe361d131324b50cfb2cc8851b4febf29bad08d4b24460f8efb243eac6236d
- SSDEEP 12288:O8e+aJ4dCXzRKX4EcJupbSRi461R1VcrP3224c+iKmDRkRFNBMUFeA+imQ269pR/:OcaJ4dCXzRKX4EcJAD1RrQz
- TLSH
  T12A25701123E9421AF5F36B79D97502709BB6BE967A38C2CE069474BD0D72BC4C9A0337
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution persistence trojan
- Creates new service(s)
  persistence execution
- Executes dropped EXE
- Loads dropped DLL
- Stops running service(s)
  defense_evasion execution
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

defense_evasiondiscoveryexecutionpersistencetrojan

behavioral2

defense_evasiondiscoveryexecutionpersistencetrojan

© 2018-2026

Terms | Privacy