General

  • Target
    2026-07-29_c00aadf0c5e130bdd3598b7ad9fd162e_amadey_coinminer_glassworm_icedid_mail-o_njrat_vidar
  • Size 4.7MB
  • Sample260729-hcsteaxblh
  • SHA256 55da0880a5f154887a548e83ca07a97e09ed64ababb891a87a97c7501e162079
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Insecure Codesign Algorithm 1 IoCs

    File was codesigned using an insecure algorithm.

File Explorer

  • 2026-07-29_c00aadf0c5e130bdd3598b7ad9fd162e_amadey_coinminer_glassworm_icedid_mail-o_njrat_vidar
    .exe 4.7MB

2026-07-29_c00aadf0c5e130bdd3598b7ad9fd162e_amadey_coinminer_glassworm_icedid_mail-o_njrat_vidar

  • IMPHASH c77770d6ac664bbe0f06ebb6d9d3822b
  • SHA256 55da0880a5f154887a548e83ca07a97e09ed64ababb891a87a97c7501e162079
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Insecure Codesign Algorithm

    File was codesigned using an insecure algorithm.

Digest
0f:d2:9d:66:90:85:d5:a8:7d:4c:21:ff:2f:92:d7:a8:eb:af:a8:b6
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=914101007390960395,CN=郑州易盛信息技术有限公司,O=郑州易盛信息技术有限公司,L=Zhengzhou,ST=Henan,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13095a68656e677a686f75,1.3.6.1.4.1.311.60.2.1.2=#130548656e616e,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Minor OS version
0
Major OS version
6
Entry point
2357840
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
E:\TencentCos\Output\release\equant9.5_cos.pdb