Analysis
- max time kernel
149s - max time network
142s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
14/10/2026, 18:44
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-10-14_778d4c35da017b0f07308dec3aa6d482_gazer_glassworm_helldown_icedid_luca-stealer_remcos.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-14_778d4c35da017b0f07308dec3aa6d482_gazer_glassworm_helldown_icedid_luca-stealer_remcos.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-10-14_778d4c35da017b0f07308dec3aa6d482_gazer_glassworm_helldown_icedid_luca-stealer_remcos.exe
- Size 20.7MB
- Sample261014-xdm2wazzcs
- SHA256 c885ff688d48905efe2d00c387aec6d151b137568a338ed4346dc18ca15c8daa
- MD5 778d4c35da017b0f07308dec3aa6d482
- SHA1 15498e9f1ddd3495431b91c3b11c831ebde753d4
- SHA512 e8dd882fe7c8f5233ccdc6fe3234302ca086e3febef20996240042081e618b9900d423eb615e4cd1aaeb6183f7e1983dd2b3f1d7281dce86d783f1acd8a8665f
- SSDEEP 196608:Pkt0+mLm3ARCHKe5LT+/XrvzOpPgW+w4LOitrtqQshPmHFs:Pkt06QC7Z+/XrvzOpPgW+2sYRheHFs
- TLSH T144274A157A9A68ACD15AC870834B4A635A2134DB1B36BCFF00D886352FAEFF05B3D715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Malware Config
Signatures
- Detects executables containing URLs to raw contents of a Github gist 1 IoCs
resource yara_rule behavioral1/memory/4232-0-0x00000000003F0000-0x000000000189A000-memory.dmp INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL