2026-09-16_88b86e022f3e5c88a950aacb8b6eb151_akira_glassworm_icedid

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-16_88b86e022f3e5c88a950aacb8b6eb151_akira_glassworm_icedid
Size 13.4MB
Sample260916-yby7ssdc39
SHA256 008579fa6bdf8d353dea421adc0d8a5b6753495eda39dea4d6325b7b6370982e
MD5 88b86e022f3e5c88a950aacb8b6eb151
SHA1 d4893be4a6dd8eaf0ed60f3c93bf0c55ae4948fc
SHA512 0fe97926380f739792afc48ce3fcc3f6f035f543460ad5628c7cb850b62261299d4a8dcc976c5ebb5efb9cac6765388cd4870ba57efc092b86bba84bdcf62a3d
SSDEEP 98304:eVoVhrPvTxllf+tSPLl9PcaBPS300MInx3eAZb1VEWb5+VvF:3Tln9kywMpAtRV
TLSH
T122E68E43F24591EDC05EC1B4A35A9633FB76BC890A34B2AF1AC426212E76F605F1E74D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Signatures

Detects executables packed with VMProtect. 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_VMProtect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-16_88b86e022f3e5c88a950aacb8b6eb151_akira_glassworm_icedid

File Explorer

2026-09-16_88b86e022f3e5c88a950aacb8b6eb151_akira_glassworm_icedid

.exe 13.4MB

2026-09-16_88b86e022f3e5c88a950aacb8b6eb151_akira_glassworm_icedid

IMPHASH 712ddab688077aad976768f789539378
SHA256 008579fa6bdf8d353dea421adc0d8a5b6753495eda39dea4d6325b7b6370982e
MD5 88b86e022f3e5c88a950aacb8b6eb151
SHA1 d4893be4a6dd8eaf0ed60f3c93bf0c55ae4948fc
SHA512 0fe97926380f739792afc48ce3fcc3f6f035f543460ad5628c7cb850b62261299d4a8dcc976c5ebb5efb9cac6765388cd4870ba57efc092b86bba84bdcf62a3d
SSDEEP 98304:eVoVhrPvTxllf+tSPLl9PcaBPS300MInx3eAZb1VEWb5+VvF:3Tln9kywMpAtRV
TLSH
T122E68E43F24591EDC05EC1B4A35A9633FB76BC890A34B2AF1AC426212E76F605F1E74D
MD5 SHA1 SHA512 SSDEEP TLSH

Detects executables packed with VMProtect.
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8954640

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetFinalPathNameByHandleW CreateMutexA WaitForSingleObjectEx ExitProcess FindFirstFileExW MoveFileExW CopyFileExW RemoveDirectoryW SetThreadStackGuarantee AddVectoredExceptionHandler SetFilePointerEx CreateDirectoryW GetExitCodeProcess WaitForMultipleObjects GetStdHandle DuplicateHandle CreateProcessW GetWindowsDirectoryW GetFileInformationByHandleEx SetFileInformationByHandle SetFileTime SetStdHandle GetFileType HeapSize RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext CreateEventW SetHandleInformation RtlPcToFileHeader GetTempPathW CreateThread GetFullPathNameW WriteFileEx SleepEx ReadFileEx LocalFree GetFileInformationByHandle SetNamedPipeHandleState CreateFileW CancelIoEx WriteFile GetOverlappedResult ReadFile SetFileCompletionNotificationModes TlsFree PostQueuedCompletionStatus CreateIoCompletionPort UnmapViewOfFile GetSystemInfo FormatMessageW GetCurrentThreadId GetSystemDirectoryW TlsSetValue DeleteFileW TlsGetValue GetProcessTimes TerminateProcess GetLocalTime WaitNamedPipeW DisconnectNamedPipe FlushFileBuffers ConnectNamedPipe OpenProcess CreateNamedPipeW GetSystemTimePreciseAsFileTime GetComputerNameW CreateMutexW WaitForSingleObject FindClose TlsAlloc CancelIo GetCurrentThread GlobalFree GlobalSize GlobalUnlock GlobalAlloc GlobalLock HeapReAlloc FindNextFileW SetFileAttributesW GetCurrentProcess Beep GetCurrentProcessId RtlDeleteFunctionTable VirtualAlloc SwitchToThread ReleaseMutex HeapFree GetProcessHeap VirtualProtect AddVectoredContinueHandler GetModuleHandleA Sleep CloseHandle GetModuleFileNameW SetThreadErrorMode FreeLibrary LoadLibraryExW GetProcAddress HeapAlloc WriteConsoleW LeaveCriticalSection GetLastError GetConsoleMode VirtualFree RtlAddFunctionTable RemoveVectoredExceptionHandler EnterCriticalSection RaiseException EncodePointer RtlUnwindEx GetConsoleOutputCP CreateWaitableTimerExW SetWaitableTimer GetFileAttributesW RemoveVectoredContinueHandler FlushInstructionCache IsProcessorFeaturePresent SetLastError InitializeCriticalSectionAndSpinCount GetQueuedCompletionStatusEx GetStartupInfoW DeleteCriticalSection SetUnhandledExceptionFilter UnhandledExceptionFilter GetModuleHandleExW GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent LCMapStringW GetACP CompareStringW WideCharToMultiByte MultiByteToWideChar GetTimeZoneInformation K32GetProcessMemoryInfo CreateToolhelp32Snapshot Process32FirstW Process32NextW LoadLibraryW Module32FirstW Module32NextW CompareStringOrdinal QueryPerformanceFrequency QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW lstrlenW LoadLibraryA GetModuleHandleW GetStringTypeW GetCommandLineA IsValidCodePage SetEnvironmentVariableW GetOEMCP GetCPInfo

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

advapi32

OpenProcessToken GetTokenInformation AdjustTokenPrivileges LookupPrivilegeValueW RevertToSelf ImpersonateAnonymousToken SystemFunction036 RegGetValueW

ws2_32

getpeername getsockname shutdown getsockopt recv WSASend WSACleanup connect bind ioctlsocket setsockopt WSAGetLastError WSAIoctl send freeaddrinfo WSASocketW WSAStartup closesocket getaddrinfo

ntdll

NtDeviceIoControlFile RtlNtStatusToDosError NtCreateFile NtCancelIoFileEx NtReadFile NtWriteFile NtOpenFile NtQuerySystemInformation NtCreateNamedPipeFile

opengl32

wglGetCurrentDC wglShareLists wglCreateContext wglMakeCurrent wglDeleteContext wglGetProcAddress wglGetCurrentContext

shlwapi

AssocQueryStringW

user32

GetAsyncKeyState GetKeyboardState MapVirtualKeyW ValidateRect ReleaseCapture GetMenu GetRawInputData SetWindowLongPtrW IsProcessDPIAware RegisterTouchWindow TrackMouseEvent ScreenToClient MonitorFromRect SetCapture GetTouchInputInfo CloseTouchInputHandle CreateWindowExW RegisterClassExW DefWindowProcW GetClassInfoExW GetMonitorInfoW GetClassNameW GetWindowPlacement GetDC FlashWindowEx MonitorFromWindow GetForegroundWindow InvalidateRgn SetWindowPos SetCursorPos ClientToScreen GetClientRect MonitorFromPoint EnumDisplayMonitors SendMessageW GetSystemMetrics GetActiveWindow ReleaseDC CreateIconFromResourceEx IsIconic RegisterRawInputDevices GetKeyState DispatchMessageW PeekMessageW PostMessageW DestroyWindow RedrawWindow GetWindowRect GetAncestor IsWindowVisible GetWindowThreadProcessId EnumWindows CloseClipboard RegisterClipboardFormatW GetClipboardData IsClipboardFormatAvailable OpenClipboard SetClipboardData EmptyClipboard GetWindowTextLengthW GetWindowTextW SetWindowTextW ShowWindow GetSystemMenu EnableMenuItem SetWindowLongW GetWindowLongW AdjustWindowRectEx ToUnicodeEx GetKeyboardLayout MapVirtualKeyExW CreateIcon GetClipCursor ClipCursor ShowCursor SetWindowDisplayAffinity RegisterWindowMessageA DestroyCursor DestroyIcon MsgWaitForMultipleObjectsEx SendInput GetCursorPos MessageBoxW SetWindowPlacement SetForegroundWindow SystemParametersInfoA ChangeDisplaySettingsExW SetCursor GetWindowLongPtrW TranslateMessage LoadCursorW

shell32

DragQueryFileW ShellExecuteW DragFinish

gdi32

DeleteObject ChoosePixelFormat CreateRectRgn SwapBuffers GetDeviceCaps SetPixelFormat DescribePixelFormat

fltlib

FilterSendMessage FilterConnectCommunicationPort

imm32

ImmSetCandidateWindow ImmReleaseContext ImmGetContext ImmGetCompositionStringW ImmAssociateContextEx ImmSetCompositionWindow

bcrypt

BCryptGenRandom

crypt32

CryptUnprotectData CryptProtectData

ole32

RevokeDragDrop CoCreateInstance CoUninitialize OleInitialize CoInitializeEx RegisterDragDrop

dwmapi

DwmSetWindowAttribute DwmEnableBlurBehindWindow

uxtheme

SetWindowTheme

Name

.text

Size

8.9MB

Virtual Size

8.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3.6MB

Virtual Size

3.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

11KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

301KB

Virtual Size

300KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.vmp0

Size

302KB

Virtual Size

302KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

364KB

Virtual Size

364KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-16_88b86e022f3e5c88a950aacb8b6eb151_akira_glassworm_icedid

kernel32

bcryptprimitives

api-ms-win-core-synch-l1-2-0

advapi32

ws2_32

ntdll

opengl32

shlwapi

user32

shell32

gdi32

fltlib

imm32

bcrypt

crypt32

ole32

dwmapi

uxtheme

generic