General

  • Target
    2026-08-02_f9a28dc8e490af977589a08ee27db0e4_coinminer_glassworm_icedid_njrat_sliver_vidar
  • Size 7.7MB
  • Sample260802-jjee2afb67
  • SHA256 cd949b5338f081716551120a4c0fd5dbe738b56555b825d42d45ab737795d477
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 2026-08-02_f9a28dc8e490af977589a08ee27db0e4_coinminer_glassworm_icedid_njrat_sliver_vidar
    .exe 7.7MB

2026-08-02_f9a28dc8e490af977589a08ee27db0e4_coinminer_glassworm_icedid_njrat_sliver_vidar

  • IMPHASH c4377941a0cf2663a86927a60839ead8
  • SHA256 cd949b5338f081716551120a4c0fd5dbe738b56555b825d42d45ab737795d477
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
3c:8b:26:8d:df:f8:b2:74:61:59:d6:d3:69:82:f9:71
Digest Algorithm
md5
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Siber Systems,O=Siber Systems,POSTALCODE=22030,STREET=Suite 400+STREET=3701 Pender Dr STE 400,L=Fairfax,C=US
Chains

Jan 1, 0001

Minor OS version
2
Major OS version
5
Entry point
2947028
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
d:\p\goodsync\x64\Release\gs-server.pdb