2026-10-13_d85a49c596444b24010cefd22ab96fe7_glassworm_icedid

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-13_d85a49c596444b24010cefd22ab96fe7_glassworm_icedid
Size 7.0MB
Sample261014-e9fcssws3p
SHA256 10bec4ab0951184d58b80d3a6023ce57f31f2a3dabd7506d383c02bd41f45d44
MD5 d85a49c596444b24010cefd22ab96fe7
SHA1 e55e534ccfba7099fbec36cf415ba303a3a6d607
SHA512 b5e3637e51fcb0324f84b7060e78504d6c40bf2a310ad5e79b504166e48a4c96a5a920ed242bd00b8201923a6e110ce20702c9720b0739bde638040f7cefe4f1
SSDEEP 98304:RkXbYD5g3DP52Lfj+ENJ7WVkXEfZdoTyvXK:Hg92byCNeZMyvK
TLSH
T140767C66A66CC0B5D0A2C079C951D6E6E2B23C45DB304ADB21A2BE1E7E377D14C3E713
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-13_d85a49c596444b24010cefd22ab96fe7_glassworm_icedid

File Explorer

2026-10-13_d85a49c596444b24010cefd22ab96fe7_glassworm_icedid

.exe 7.0MB

2026-10-13_d85a49c596444b24010cefd22ab96fe7_glassworm_icedid

IMPHASH b91d03e6a68ba510f86948759b4947a3
SHA256 10bec4ab0951184d58b80d3a6023ce57f31f2a3dabd7506d383c02bd41f45d44
MD5 d85a49c596444b24010cefd22ab96fe7
SHA1 e55e534ccfba7099fbec36cf415ba303a3a6d607
SHA512 b5e3637e51fcb0324f84b7060e78504d6c40bf2a310ad5e79b504166e48a4c96a5a920ed242bd00b8201923a6e110ce20702c9720b0739bde638040f7cefe4f1
SSDEEP 98304:RkXbYD5g3DP52Lfj+ENJ7WVkXEfZdoTyvXK:Hg92byCNeZMyvK
TLSH
T140767C66A66CC0B5D0A2C079C951D6E6E2B23C45DB304ADB21A2BE1E7E377D14C3E713
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2841680

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\VMWD\Build\Bin.Win\Programs_VS10_64.fin\Add-Ons\BIMx\BIMx.pdb

kernel32

SetStdHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA SetEnvironmentVariableA GetLocalTime SystemTimeToFileTime GetTempPathA GetDiskFreeSpaceA GetACP GetUserDefaultUILanguage RtlAddFunctionTable IsBadReadPtr GetComputerNameA GetSystemDirectoryA GetWindowsDirectoryA GetSystemInfo CompareStringW CompareStringA GetLocaleInfoW SetLastError GetExitCodeThread DuplicateHandle GetProcessHeap HeapAlloc TerminateProcess HeapFree GetModuleHandleA IsValidLocale EnumSystemLocalesA GetUserDefaultLCID HeapReAlloc GetModuleFileNameA SetThreadPriority SetPriorityClass GetCurrentThread VirtualQuery GetCurrentThreadId SetConsoleCtrlHandler OpenEventA GetConsoleCP GetStringTypeW GetStringTypeA HeapSize InitializeCriticalSectionAndSpinCount IsValidCodePage GetOEMCP LCMapStringW LCMapStringA GetCPInfo GetModuleHandleW GetStartupInfoA GetFileType SetHandleCount FlsAlloc FlsFree FlsSetValue FlsGetValue SetEvent GetCurrentDirectoryA GetTickCount GetCurrentProcess DecodePointer EncodePointer HeapDestroy HeapCreate HeapSetInformation RtlPcToFileHeader RaiseException RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter RtlUnwindEx RtlLookupFunctionEntry LockFile UnlockFile IsBadStringPtrW IsBadStringPtrA DeviceIoControl VirtualProtect FlushInstructionCache GetDriveTypeA ReleaseSemaphore OpenSemaphoreA GetCurrentProcessId CreateSemaphoreA GetFileTime GetFileSize SetEndOfFile FlushFileBuffers GetVersion GetLocaleInfoA GetVersionExA SetFilePointer ReadFile WriteFile GetSystemTimeAsFileTime MultiByteToWideChar WideCharToMultiByte TlsFree LocalFree TlsGetValue TlsSetValue LocalAlloc ExitProcess TlsAlloc GetFileAttributesA GetFullPathNameA SetCurrentDirectoryA FileTimeToSystemTime GetTimeZoneInformation GetSystemTime WritePrivateProfileStringA GetPrivateProfileStringA GetPrivateProfileIntA GetLastError GetPrivateProfileSectionA WritePrivateProfileSectionA AreFileApisANSI LoadLibraryA GetEnvironmentVariableA CloseHandle UnmapViewOfFile OpenFileMappingA CreateFileMappingA MapViewOfFile DeleteCriticalSection InitializeCriticalSection EnterCriticalSection LeaveCriticalSection GetStdHandle GetConsoleMode FreeLibrary GetProcAddress Sleep WaitForSingleObject OpenProcess GetExitCodeProcess CreateEventA WaitForMultipleObjects DeleteFileA SetFileTime CreateFileA CreateDirectoryA GetProfileStringA IsBadWritePtr

user32

CharLowerBuffA CharUpperBuffA DrawMenuBar AppendMenuA GetSystemMenu MessageBoxA PeekMessageA CallMsgFilterA TranslateMessage GetSystemMetrics wsprintfA LoadStringA DispatchMessageA

advapi32

StartServiceA RegOpenKeyExA ConvertStringSecurityDescriptorToSecurityDescriptorA GetSecurityDescriptorSacl SetSecurityDescriptorSacl RegCreateKeyExA QueryServiceConfigA RegFlushKey OpenSCManagerA OpenServiceA QueryServiceStatus CloseServiceHandle RegDeleteValueA InitializeSecurityDescriptor SetSecurityDescriptorDacl GetUserNameA RegEnumValueA RegEnumKeyExA RegDeleteKeyA RegSetValueExA RegQueryValueExA RegCloseKey

version

GetFileVersionInfoSizeA VerQueryValueA GetFileVersionInfoA

shell32

ShellExecuteExA

wsock32

accept gethostbyaddr gethostname ioctlsocket WSAStartup gethostbyname WSACleanup getpeername getsockopt WSAGetLastError recv __WSAFDIsSet select closesocket shutdown send connect inet_ntoa setsockopt socket inet_addr bind recvfrom sendto htons

Name

.text

Size

4.1MB

Virtual Size

4.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

804KB

Virtual Size

804KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

145KB

Virtual Size

457KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

111KB

Virtual Size

110KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

text

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

data

Size

29KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

847KB

Virtual Size

847KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

623KB

Virtual Size

624KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

generic

count=16, id=174, version=40219,

count=34, id=170, productName=VS2010 build 30319, version=30319,

count=244, id=170, productName=VS2010 SP1 build 40219, version=40219,

count=26, id=158, productName=VS2010 SP1 build 40219, version=40219,

count=23, id=171, productName=VS2010 build 30319, version=30319,

count=7, id=152, version=20115,

count=4, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=3, id=135, version=30729,

count=49, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=558, id=1, productName=Unmarked objects,

count=1, id=173, version=30319,

count=468, id=171, productName=VS2010 SP1 build 40219, version=40219,

count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,

count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,

count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,