2026-07-30_61857cffe90f0340728350c068cb5d82_coinminer_glassworm_icedid

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-30_61857cffe90f0340728350c068cb5d82_coinminer_glassworm_icedid
Size 9.9MB
Sample260730-f97byscd64
SHA256 a5d9d6c4bc68e495ec3a3fdcdd3cecfb1330124840fd74be2d518068b014715d
MD5 61857cffe90f0340728350c068cb5d82
SHA1 29ca116d7d24dad54ed151a55b3b414c81bb004c
SHA512 3bd46d8077471de7ff5727c785ddba82f76a4c397b0990a75bd1303645fbb07bab921e5a89616a80de64d3d5d8f58d03ef1fac1e4ca5d40dd9be3ffee6fa1ea7
SSDEEP 24576:CBstTyO5pj2oZfuQwhjVjUKqC0gCxf9RGWvMdPzpw40b1Gci4gwvR00J:CBst+O5pj2oZfuQzKqcCf94yZpt
TLSH
T176A65B07FCA525F6C0AF9231896259927B71BC481F3123D72A90BB382FB6BD05D79B50
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-30_61857cffe90f0340728350c068cb5d82_coinminer_glassworm_icedid

File Explorer

2026-07-30_61857cffe90f0340728350c068cb5d82_coinminer_glassworm_icedid

.exe 9.9MB

2026-07-30_61857cffe90f0340728350c068cb5d82_coinminer_glassworm_icedid

IMPHASH 4e2bd2c481372f7ab13b83b63b424e97
SHA256 a5d9d6c4bc68e495ec3a3fdcdd3cecfb1330124840fd74be2d518068b014715d
MD5 61857cffe90f0340728350c068cb5d82
SHA1 29ca116d7d24dad54ed151a55b3b414c81bb004c
SHA512 3bd46d8077471de7ff5727c785ddba82f76a4c397b0990a75bd1303645fbb07bab921e5a89616a80de64d3d5d8f58d03ef1fac1e4ca5d40dd9be3ffee6fa1ea7
SSDEEP 24576:CBstTyO5pj2oZfuQwhjVjUKqC0gCxf9RGWvMdPzpw40b1Gci4gwvR00J:CBst+O5pj2oZfuQzKqcCf94yZpt
TLSH
T176A65B07FCA525F6C0AF9231896259927B71BC481F3123D72A90BB382FB6BD05D79B50
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

538400

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

979KB

Virtual Size

979KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

191KB

Virtual Size

32.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

26KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

20KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

2026-07-30_61857cffe90f0340728350c068cb5d82_coinminer_glassworm_icedid

kernel32

generic