2026-08-16_bac63b81f9963d8996c938565fe69abf_glassworm_icedid

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-16_bac63b81f9963d8996c938565fe69abf_glassworm_icedid
Size 1.4MB
Sample260816-hd9hjsbf97
SHA256 be441c973187c3a354aa9725ad1a442938278f0699697621feb24367fe704217
MD5 bac63b81f9963d8996c938565fe69abf
SHA1 0f982461e71f5e0bae1a876a4870586533806dc6
SHA512 87bccf06402878c0de4ca038757877539cb8664373e76507e8cc36a0f4f5471d07d93020b37c29955a864a72fd361189800484fb6af74879fc49588d1291863e
SSDEEP 24576:53CTQQje6KWjFUsTNEDcN20pah5nQsrivkdhWeWr2O8hYzlj1TNp4j7YoqKJFzz:53CTQQjxKWjFUsTWDcN20k5nQsrivkd1
TLSH
T18B65AE0673E6C1E8DEBB90B6C525A223D771781407389BDB24E0592EDFB3AD05B3A711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-16_bac63b81f9963d8996c938565fe69abf_glassworm_icedid

File Explorer

2026-08-16_bac63b81f9963d8996c938565fe69abf_glassworm_icedid

.exe 1.4MB

2026-08-16_bac63b81f9963d8996c938565fe69abf_glassworm_icedid

IMPHASH a9b5160326ed68a4bb81944dabab7ed6
SHA256 be441c973187c3a354aa9725ad1a442938278f0699697621feb24367fe704217
MD5 bac63b81f9963d8996c938565fe69abf
SHA1 0f982461e71f5e0bae1a876a4870586533806dc6
SHA512 87bccf06402878c0de4ca038757877539cb8664373e76507e8cc36a0f4f5471d07d93020b37c29955a864a72fd361189800484fb6af74879fc49588d1291863e
SSDEEP 24576:53CTQQje6KWjFUsTNEDcN20pah5nQsrivkdhWeWr2O8hYzlj1TNp4j7YoqKJFzz:53CTQQjxKWjFUsTWDcN20k5nQsrivkd1
TLSH
T18B65AE0673E6C1E8DEBB90B6C525A223D771781407389BDB24E0592EDFB3AD05B3A711
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1361920

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

wsock32

getservbyport ntohs inet_addr htonl getservbyname WSASetLastError htons WSAGetLastError gethostbyname ioctlsocket gethostbyaddr gethostname shutdown WSACleanup closesocket connect socket WSAStartup send recv WSAAsyncSelect inet_ntoa

winmm

waveOutGetVolume mixerGetLineInfoW mixerSetControlDetails mixerGetControlDetailsW mixerGetLineControlsW mixerGetDevCapsW waveOutSetVolume mixerClose mixerOpen mciSendStringW joyGetDevCapsW joyGetPosEx

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

comctl32

ImageList_GetIconSize ImageList_Create ImageList_Destroy ImageList_AddMasked ImageList_ReplaceIcon CreateStatusWindowW

psapi

GetModuleBaseNameW GetProcessImageFileNameW GetModuleFileNameExW

wininet

InternetReadFile InternetOpenUrlW InternetCloseHandle InternetReadFileExA InternetOpenW

kernel32

GlobalFree GlobalUnlock WideCharToMultiByte GetSystemDirectoryA LoadLibraryA GetProcAddress FreeLibrary GetCurrentThreadId GetEnvironmentVariableW lstrcmpiW GetStringTypeExW CreateThread SetThreadPriority GetExitCodeThread CloseHandle CreateMutexW GetLastError LoadLibraryW GetModuleHandleW GetVersionExW InitializeCriticalSection DeleteCriticalSection GetModuleFileNameW GetFileAttributesW GetFullPathNameW GetSystemTimeAsFileTime LoadResource LockResource SizeofResource GetShortPathNameW FindFirstFileW FindNextFileW FindClose FileTimeToLocalFileTime SetEnvironmentVariableW Beep MoveFileW OutputDebugStringW CreateProcessW MultiByteToWideChar GetExitCodeProcess WriteProcessMemory ReadProcessMemory GetCurrentProcessId OpenProcess TerminateProcess SetPriorityClass SetLastError GlobalAlloc GetDateFormatW GetTimeFormatW GetDiskFreeSpaceExW SetVolumeLabelW CreateFileW DeviceIoControl GetDriveTypeW GetVolumeInformationW GetDiskFreeSpaceW GetCurrentDirectoryW CreateDirectoryW ReadFile WriteFile DeleteFileW CopyFileW SetFileAttributesW LocalFileTimeToFileTime SetFileTime GetFileSizeEx GetSystemTime GetSystemDefaultUILanguage GetComputerNameW GetSystemWindowsDirectoryW GetTempPathW EnterCriticalSection LeaveCriticalSection VirtualProtect QueryDosDeviceW CompareStringW RemoveDirectoryW GetCurrentProcess CreateToolhelp32Snapshot Process32FirstW Process32NextW FormatMessageW GetPrivateProfileStringW GetPrivateProfileSectionW GetPrivateProfileSectionNamesW WritePrivateProfileStringW WritePrivateProfileSectionW SetEndOfFile GetACP GetFileType GetStdHandle SetFilePointerEx SystemTimeToFileTime FileTimeToSystemTime GetFileSize IsWow64Process VirtualAllocEx VirtualFreeEx EnumResourceNamesW LoadLibraryExW GlobalSize GlobalLock FindResourceW SetErrorMode GetCPInfo SetCurrentDirectoryW Sleep GetTickCount MulDiv EncodePointer HeapSize HeapQueryInformation GetCommandLineW GetStartupInfoW GetOEMCP IsValidCodePage FlsGetValue HeapAlloc HeapFree HeapReAlloc ExitProcess DecodePointer FlsSetValue FlsFree FlsAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetStringTypeW HeapSetInformation GetVersion HeapCreate InitializeCriticalSectionAndSpinCount RtlUnwindEx RaiseException RtlPcToFileHeader LCMapStringW GetConsoleCP GetConsoleMode FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount QueryPerformanceCounter SetFilePointer WriteConsoleW SetStdHandle FlushFileBuffers GetLocalTime GetProcessHeap

user32

SetWindowPos SetLayeredWindowAttributes InvalidateRect EnableWindow GetWindowTextLengthW EnumWindows IsZoomed IsIconic EnumDisplayMonitors RegisterWindowMessageW GetSysColor GetSysColorBrush DrawIconEx FillRect DefWindowProcW SetForegroundWindow DialogBoxParamW SendDlgItemMessageW GetDlgItem SetDlgItemTextW MessageBeep GetCursorInfo GetLastInputInfo GetSystemMenu GetMenuItemCount GetMenuItemID GetSubMenu GetMenuStringW ExitWindowsEx SetMenu FlashWindow GetPropW SetPropW RemovePropW MapWindowPoints RedrawWindow SetWindowLongPtrW SetParent GetClassInfoExW DefDlgProcW GetAncestor UpdateWindow GetMessagePos GetClassLongPtrW CallWindowProcW CheckRadioButton IntersectRect GetUpdateRect PtInRect CreateDialogIndirectParamW GetWindowLongPtrW CreateAcceleratorTableW DestroyAcceleratorTable InsertMenuItemW SetMenuDefaultItem RemoveMenu SetMenuItemInfoW IsMenu GetMenuItemInfoW CreateMenu CreatePopupMenu SetMenuInfo AppendMenuW DestroyMenu TrackPopupMenuEx CopyImage SetWindowRgn CreateIconFromResourceEx EnumClipboardFormats GetWindow BringWindowToTop GetTopWindow GetQueueStatus CheckMenuItem PostQuitMessage GetIconInfo ChangeClipboardChain SetClipboardViewer LoadAcceleratorsW EnableMenuItem GetMenu CreateWindowExW RegisterClassExW LoadCursorW DestroyIcon DestroyWindow IsCharAlphaW MapVirtualKeyW VkKeyScanExW MapVirtualKeyExW GetKeyboardLayoutNameW ActivateKeyboardLayout GetGUIThreadInfo GetWindowTextW mouse_event WindowFromPoint GetSystemMetrics keybd_event SetKeyboardState GetKeyboardState GetCursorPos GetAsyncKeyState AttachThreadInput UnregisterHotKey RegisterHotKey SendMessageTimeoutW UnhookWindowsHookEx SetWindowsHookExW PostThreadMessageW IsCharAlphaNumericW IsCharUpperW IsCharLowerW ToUnicodeEx GetKeyboardLayout CallNextHookEx CharLowerW ReleaseDC GetDC MessageBoxW OpenClipboard GetClipboardData GetClipboardFormatNameW CloseClipboard SetClipboardData EmptyClipboard PostMessageW FindWindowW EndDialog IsWindow DispatchMessageW TranslateMessage ShowWindow SetFocus SetActiveWindow ClientToScreen EnumChildWindows MoveWindow GetWindowRect GetMonitorInfoW MonitorFromPoint GetClientRect SystemParametersInfoW AdjustWindowRectEx DrawTextW CreateIconIndirect SetRect CountClipboardFormats SetWindowLongW ScreenToClient IsDialogMessageW SendMessageW IsWindowEnabled GetWindowLongW GetKeyState TranslateAcceleratorW KillTimer PeekMessageW GetFocus GetClassNameW GetWindowThreadProcessId GetForegroundWindow GetMessageW SetTimer GetParent GetDlgCtrlID CharUpperW IsClipboardFormatAvailable SetWindowTextW IsWindowVisible LoadImageW BlockInput SendInput

gdi32

GdiFlush CreateDIBSection EnumFontFamiliesExW SetBrushOrgEx SetBkColor GetPixel BitBlt CreatePatternBrush SetBkMode GetCharABCWidthsW GetClipBox FillRgn GetClipRgn ExcludeClipRect GetDeviceCaps DeleteObject CreateFontW CreateSolidBrush CreateDCW CreateCompatibleBitmap GetSystemPaletteEntries GetDIBits CreateCompatibleDC CreatePolygonRgn CreateRectRgn CreateRoundRectRgn CreateEllipticRgn DeleteDC GetObjectW GetTextMetricsW GetTextFaceW SelectObject GetStockObject SetTextColor

comdlg32

CommDlgExtendedError GetOpenFileNameW GetSaveFileNameW

advapi32

GetUserNameW LockServiceDatabase OpenSCManagerW RegEnumKeyExW RegEnumValueW RegQueryInfoKeyW RegOpenKeyExW RegCloseKey RegDeleteValueW RegDeleteKeyW RegSetValueExW RegCreateKeyExW RegQueryValueExW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken CloseServiceHandle RegConnectRegistryW UnlockServiceDatabase

shell32

DragQueryPoint SHEmptyRecycleBinW SHFileOperationW SHGetPathFromIDListW SHBrowseForFolderW SHGetDesktopFolder SHGetMalloc SHGetFolderPathW ShellExecuteExW Shell_NotifyIconW DragFinish DragQueryFileW ExtractIconW

ole32

OleInitialize OleUninitialize CoCreateInstance CoInitialize CoUninitialize CLSIDFromString CLSIDFromProgID CoGetObject StringFromGUID2 CreateStreamOnHGlobal

oleaut32

OleLoadPicture SafeArrayUnaccessData SafeArrayGetElemsize SafeArrayAccessData SafeArrayUnlock SafeArrayDestroy GetActiveObject SysStringLen SysFreeString SafeArrayCreate VariantClear VariantChangeType SysAllocString SafeArrayCopy VariantCopyInd SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetDim SafeArrayLock SafeArrayPtrOfIndex

Name

.text

Size

948KB

Virtual Size

947KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

210KB

Virtual Size

210KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

20KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

33KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

text

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE

Name

data

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

170KB

Virtual Size

362KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-16_bac63b81f9963d8996c938565fe69abf_glassworm_icedid

wsock32

winmm

version

comctl32

psapi

wininet

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

generic