297ebc6b5f8c3e104508bfdbfd9ef958217861155ae9621ffd89a7abcfbbc49b

Analysis

max time kernel
150s
max time network
132s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/10/2026, 04:04

Target
2026-10-22_95fb30013522165ee1bfd30aae33cd38_glassworm_icedid.exe
Size 3.6MB
Sample261024-emy7dsfw8t
SHA256 297ebc6b5f8c3e104508bfdbfd9ef958217861155ae9621ffd89a7abcfbbc49b
MD5 95fb30013522165ee1bfd30aae33cd38
SHA1 8e187dc19d226f46fdfd6596ed648edac9318f48
SHA512 b5b38f888e9ed7c00809854ad8b062f0aec3115c422ecb9d01e11fe9dac4cec8f83ace5de4224402843c3c79db0b694ef583f1561641591e003a24fa6d4c70e4
SSDEEP 98304:FIHB4qBf28/Bo02KcLydwZWrYp6PQGBrH+YIleHu:OsAKZLKfrVIll
TLSH
T148066C52F25290F9C129C174D749A633BA727C894B3436FB5694BB223F71B906E3EB04
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2532	2026-10-22_95fb30013522165ee1bfd30aae33cd38_glassworm_icedid.exe
2532	2026-10-22_95fb30013522165ee1bfd30aae33cd38_glassworm_icedid.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-22_95fb30013522165ee1bfd30aae33cd38_glassworm_icedid.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-22_95fb30013522165ee1bfd30aae33cd38_glassworm_icedid.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2532

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5924