2026-08-17_5bc54c7c2c96e4140fae811fc0fe2541_glassworm_icedid

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-17_5bc54c7c2c96e4140fae811fc0fe2541_glassworm_icedid
Size 1.4MB
Sample260817-xxcp9axeqa
SHA256 c2eb87182d34216f7cf5fb1e7d6bfbe44688ab5532d6c1212ad6c7e7108d912c
MD5 5bc54c7c2c96e4140fae811fc0fe2541
SHA1 c0072920f5050ccfd2dca8409444cf67f65cf8e7
SHA512 fd5508769eab0ecceaa60e27b82db23446cd329836a6f1ca7d55b47764da8974c88c82707dce2406066b51acbc01639a7bae44b625c2e2b0c7e897e208e059d1
SSDEEP 24576:EmoJFXWDwJ5a/FDe1l8jD3Qokol96PA+qZrUV/+Ho1Nc7qRMD:MRJ5gDxf+qZrUV/+Ho1Nc7qRMD
TLSH
T1FF653A5262EB4CAAEED3577856C79336A638FD60CB378B6B4140D5313A032E07E6B750
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-17_5bc54c7c2c96e4140fae811fc0fe2541_glassworm_icedid

File Explorer

2026-08-17_5bc54c7c2c96e4140fae811fc0fe2541_glassworm_icedid

.exe 1.4MB

2026-08-17_5bc54c7c2c96e4140fae811fc0fe2541_glassworm_icedid

IMPHASH c208f1f4eb1b93138cbd2d654fa204ae
SHA256 c2eb87182d34216f7cf5fb1e7d6bfbe44688ab5532d6c1212ad6c7e7108d912c
MD5 5bc54c7c2c96e4140fae811fc0fe2541
SHA1 c0072920f5050ccfd2dca8409444cf67f65cf8e7
SHA512 fd5508769eab0ecceaa60e27b82db23446cd329836a6f1ca7d55b47764da8974c88c82707dce2406066b51acbc01639a7bae44b625c2e2b0c7e897e208e059d1
SSDEEP 24576:EmoJFXWDwJ5a/FDe1l8jD3Qokol96PA+qZrUV/+Ho1Nc7qRMD:MRJ5gDxf+qZrUV/+Ho1Nc7qRMD
TLSH
T1FF653A5262EB4CAAEED3577856C79336A638FD60CB378B6B4140D5313A032E07E6B750
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5328

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

comdlg32

GetOpenFileNameW GetSaveFileNameW

gdi32

CreateFontW CreateSolidBrush DeleteObject SelectObject SetBkColor SetBkMode SetTextColor

kernel32

BeginUpdateResourceW CloseHandle CreateDirectoryW CreateFileW DeleteCriticalSection EndUpdateResourceW EnterCriticalSection FindClose FindFirstFileW FindNextFileW FindResourceW FreeLibrary GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetFileAttributesW GetFileSize GetLastError GetLocalTime GetModuleFileNameW GetModuleHandleW GetStartupInfoW GetSystemTimeAsFileTime GetTempPathW GetTickCount InitializeCriticalSection LeaveCriticalSection LoadLibraryW LoadResource LockResource MultiByteToWideChar QueryPerformanceCounter ReadFile RtlAddFunctionTable RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetUnhandledExceptionFilter SizeofResource Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter UpdateResourceW VirtualProtect VirtualQuery WideCharToMultiByte WriteFile

msvcrt

__C_specific_handler __doserrno __iob_func __lconv_init __pioinfo __set_app_type __setusermatherr __wgetmainargs __winitenv _amsg_exit _cexit _errno _exit _filelengthi64 _fileno _fmode _initterm _lseeki64 _onexit _snwprintf _utime _vsnprintf _wcmdln _wcsicmp _wfopen_s _wfreopen_s _time64 _write _wstat64 abort calloc exit fclose fflush fgetpos fprintf fread free fsetpos fwprintf fwrite localtime malloc memcmp memcpy memset mktime raise realloc remove signal sprintf sscanf strchr strlen strncmp vfprintf wcscat wcscmp wcscpy wcslen wcsncpy wcsrchr wcsstr

ole32

CoTaskMemFree

shell32

SHBrowseForFolderW SHGetPathFromIDListW Shell_NotifyIconW

user32

AdjustWindowRectEx AppendMenuW BeginPaint CheckDlgButton CheckRadioButton CreatePopupMenu DefWindowProcW DestroyMenu DialogBoxParamW DrawTextW EndDialog EndPaint EnumChildWindows FillRect GetClientRect GetCursorPos GetDlgItem GetDlgItemInt GetDlgItemTextW GetWindowLongPtrW GetWindowLongW InflateRect InvalidateRect IsDlgButtonChecked LoadCursorW LoadIconW MessageBoxW PtInRect ReleaseCapture ScreenToClient SendDlgItemMessageW SendMessageW SetCursor SetDlgItemInt SetDlgItemTextW SetFocus SetForegroundWindow SetWindowLongPtrW SetWindowPos SetWindowTextW ShowWindow TrackMouseEvent TrackPopupMenu wsprintfW

winhttp

WinHttpCloseHandle WinHttpConnect WinHttpCrackUrl WinHttpOpen WinHttpOpenRequest WinHttpQueryDataAvailable WinHttpReadData WinHttpReceiveResponse WinHttpSendRequest

Name

.text

Size

162KB

Virtual Size

161KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

416B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

14KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

80B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/31

Size

512B

Virtual Size

329B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/45

Size

1024B

Virtual Size

546B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/57

Size

512B

Virtual Size

72B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/70

Size

512B

Virtual Size

155B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-17_5bc54c7c2c96e4140fae811fc0fe2541_glassworm_icedid

comdlg32

gdi32

kernel32

msvcrt

ole32

shell32

user32

winhttp

generic