General
- Target 2026-10-27_d634ff619a35b2a7a674cb2c94bf515e_glassworm_icedid_vidar
- Size 356KB
- Sample261028-ymg3nahc97
- SHA256 969f4fd53d9a9e7717829e647bfade62b0e13f368e9e2aa52b589653e90bd95d
- MD5 d634ff619a35b2a7a674cb2c94bf515e
- SHA1 b99d3d42182318fd4ec2580b6903b5146182cc88
- SHA512 f504e99953e0f5c520dbd6b3703ac709085c4903d015555e1e0d61fd34a614965e5e1c0aaba369f6cb886e1806a801a31b147fc54afcb4dcfd0034520d0cddaa
- SSDEEP 6144:Kdbu1J7PCaXxMLGxKWR1mlkVl+lIzohdMxB+RNGrQLFR461+nO7zs0IBVL6:muqyxMLNplyon0BB
- TLSH T1EB743838BA65DCE4CB2FB1B489212E4551713C0B8730E69FA68525DB5E372D0EF3D928
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-27_d634ff619a35b2a7a674cb2c94bf515e_glassworm_icedid_vidar.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-27_d634ff619a35b2a7a674cb2c94bf515e_glassworm_icedid_vidar.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://webcdns.com:2083/static-directory/lt.mp3
Attributes
-
user_agent
Host: webcdns.com Connection: close Accept: image/* User-Agent: Mozilla/5.0 (Windows Phone 10.0; Android 6.0.1; Microsoft; RM-1152) AppleWebKit/537.36 (KHTML, like Gecko)
Targets
-
- Target 2026-10-27_d634ff619a35b2a7a674cb2c94bf515e_glassworm_icedid_vidar
- Size 356KB
- SHA256 969f4fd53d9a9e7717829e647bfade62b0e13f368e9e2aa52b589653e90bd95d
- MD5 d634ff619a35b2a7a674cb2c94bf515e
- SHA1 b99d3d42182318fd4ec2580b6903b5146182cc88
- SHA512 f504e99953e0f5c520dbd6b3703ac709085c4903d015555e1e0d61fd34a614965e5e1c0aaba369f6cb886e1806a801a31b147fc54afcb4dcfd0034520d0cddaa
- SSDEEP 6144:Kdbu1J7PCaXxMLGxKWR1mlkVl+lIzohdMxB+RNGrQLFR461+nO7zs0IBVL6:muqyxMLNplyon0BB
- TLSH T1EB743838BA65DCE4CB2FB1B489212E4551713C0B8730E69FA68525DB5E372D0EF3D928
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.