7cc5fef6fc3e0feadb3ce88e96298b25df3b02f5dde56e93fe7c13208db75edd

Analysis

max time kernel
150s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/11/2026, 10:15

Target
2026-11-07_c8e14d6c8901a73cacfc7722b49c8ae3_glassworm_icedid_njrat_vidar.exe
Size 2.3MB
Sample261107-maeafsw16j
SHA256 7cc5fef6fc3e0feadb3ce88e96298b25df3b02f5dde56e93fe7c13208db75edd
MD5 c8e14d6c8901a73cacfc7722b49c8ae3
SHA1 fbce254cefb47019300b81b7587807d7475299d3
SHA512 45386be2c7a57d30b6e169c7184ca77db2a5d23c9c5e462a393d29ddcdc8dbe9dd376bd5786df90be0b27920e6f9c7012f4f9c14263f0a4fe71fd0f416645d1c
SSDEEP 49152:Fh+jOHKkG+ggKx4JGpSGMztUCKzoEkGQwaPMLxIrQ:i4K2ckrQ
TLSH
T1D7B59E2DA5ED01E4D0B6C1748E6B4657F3B674090334AEF70295896A1F2BF986B3BF01
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
1952	2026-11-07_c8e14d6c8901a73cacfc7722b49c8ae3_glassworm_icedid_njrat_vidar.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 5432 wrote to memory of 1952	5432	2026-11-07_c8e14d6c8901a73cacfc7722b49c8ae3_glassworm_icedid_njrat_vidar.exe	90

C:\Users\Admin\AppData\Local\Temp\2026-11-07_c8e14d6c8901a73cacfc7722b49c8ae3_glassworm_icedid_njrat_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-11-07_c8e14d6c8901a73cacfc7722b49c8ae3_glassworm_icedid_njrat_vidar.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5432
- C:\Users\Admin\AppData\Local\HuaiRemote\2026-11-07_c8e14d6c8901a73cacfc7722b49c8ae3_glassworm_icedid_njrat_vidar.exe
  "C:\Users\Admin\AppData\Local\HuaiRemote\2026-11-07_c8e14d6c8901a73cacfc7722b49c8ae3_glassworm_icedid_njrat_vidar.exe" --persist
  2⤵
  - Executes dropped EXE
  PID:1952

2026-11-07_c8e14d6c8901a73cacfc7722b49c8ae3_glassworm_icedid_njrat_vidar.exe

Path C:\Users\Admin\AppData\Local\HuaiRemote\2026-11-07_c8e14d6c8901a73cacfc7722b49c8ae3_glassworm_icedid_njrat_vidar.exe
Size 2.3MB
SHA256 7cc5fef6fc3e0feadb3ce88e96298b25df3b02f5dde56e93fe7c13208db75edd
MD5 c8e14d6c8901a73cacfc7722b49c8ae3
SHA1 fbce254cefb47019300b81b7587807d7475299d3
SHA512 45386be2c7a57d30b6e169c7184ca77db2a5d23c9c5e462a393d29ddcdc8dbe9dd376bd5786df90be0b27920e6f9c7012f4f9c14263f0a4fe71fd0f416645d1c
SSDEEP 49152:Fh+jOHKkG+ggKx4JGpSGMztUCKzoEkGQwaPMLxIrQ:i4K2ckrQ
TLSH
T1D7B59E2DA5ED01E4D0B6C1748E6B4657F3B674090334AEF70295896A1F2BF986B3BF01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download