2026-10-26_a2347e98c331e577f3abcc463c3ac68b_akira_glassworm_icedid_quasar-rat

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-26_a2347e98c331e577f3abcc463c3ac68b_akira_glassworm_icedid_quasar-rat
Size 12.3MB
Sample261027-mfczksdc33
SHA256 b7c9bb8af9128ed9f61e956f061ca66bd4fad4e78ee042a54bf0f22deca42e72
MD5 a2347e98c331e577f3abcc463c3ac68b
SHA1 41380d891fbd2c0f8c9a24423a0c52c34b597854
SHA512 1df4c0674c0e7acda8a120de4423aaafb875de69f2dbb13906361154a9eb788d54004057c56d7e42ae1e4aa0f693ca09baac766f70f86818b03e3a714c4c5448
SSDEEP 196608:KowcgHiwFC20Z6jd1EEarb6ybQK0lsjk/J6+f/u246j9RzjeU5UbkLRHd:fEiwsx2YEm6y4lsjg4+f/h42jB57RHd
TLSH
T15DD6CF07F25190B8C05EC3B5975F9632EA72B88D052471BA57F86B212F7BE102B2D79C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
2026-10-26_a2347e98c331e577f3abcc463c3ac68b_akira_glassworm_icedid_quasar-rat

File Explorer

2026-10-26_a2347e98c331e577f3abcc463c3ac68b_akira_glassworm_icedid_quasar-rat

.exe 12.3MB

2026-10-26_a2347e98c331e577f3abcc463c3ac68b_akira_glassworm_icedid_quasar-rat

IMPHASH 987bff3cc8599daccdbf8933831c59e6
SHA256 b7c9bb8af9128ed9f61e956f061ca66bd4fad4e78ee042a54bf0f22deca42e72
MD5 a2347e98c331e577f3abcc463c3ac68b
SHA1 41380d891fbd2c0f8c9a24423a0c52c34b597854
SHA512 1df4c0674c0e7acda8a120de4423aaafb875de69f2dbb13906361154a9eb788d54004057c56d7e42ae1e4aa0f693ca09baac766f70f86818b03e3a714c4c5448
SSDEEP 196608:KowcgHiwFC20Z6jd1EEarb6ybQK0lsjk/J6+f/u246j9RzjeU5UbkLRHd:fEiwsx2YEm6y4lsjg4+f/h42jB57RHd
TLSH
T15DD6CF07F25190B8C05EC3B5975F9632EA72B88D052471BA57F86B212F7BE102B2D79C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

3d:a7:e8:40:fc:83:04:d5:b3:97:b2:36:09:d9:24:a0:b1:9b:fe:8c:32:28:d5:04:42:70:86:b6:5c:af:1a:1e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

NO CERTIFICATE

Chains

Jan 1, 0001

Minor OS version

Major OS version

Entry point

5152

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

RegCreateKeyExW SystemFunction036 RegCloseKey RegDeleteTreeW RegDeleteValueW RegGetValueW RegOpenKeyExW RegQueryValueExW RegSetValueExW

bcrypt

BCryptGenRandom

crypt32

CryptProtectData CryptUnprotectData

kernel32

AddVectoredExceptionHandler AssignProcessToJobObject CreateFileMappingA CreateJobObjectW CreateToolhelp32Snapshot FreeEnvironmentStringsW GetCommandLineW GetCurrentDirectoryW GetEnvironmentStringsW GetEnvironmentVariableW K32EmptyWorkingSet K32GetProcessMemoryInfo Module32FirstW Module32NextW Process32FirstW Process32NextW QueryPerformanceCounter QueryPerformanceFrequency RtlCaptureContext RtlVirtualUnwind SetEnvironmentVariableW SetInformationJobObject SetUnhandledExceptionFilter CloseHandle GetLastError GetModuleHandleA GetProcAddress Sleep CompareStringOrdinal DuplicateHandle ExitProcess FormatMessageW FreeLibrary GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetExitCodeProcess GetExitCodeThread GetModuleFileNameW GetModuleHandleW GetProcessHeap GetProcessId GetProcessTimes GetSystemDirectoryW GetSystemInfo GetSystemTimePreciseAsFileTime GetUserDefaultUILanguage GetWindowsDirectoryW HeapAlloc HeapFree HeapReAlloc InitOnceBeginInitialize InitOnceComplete LCIDToLocaleName LoadLibraryA LoadLibraryExA LoadLibraryW LocalFree MapViewOfFile MultiByteToWideChar OpenProcess QueryFullProcessImageNameW ReleaseMutex RtlLookupFunctionEntry SetHandleInformation SetLastError SetThreadStackGuarantee SetWaitableTimer SleepEx SwitchToThread TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnmapViewOfFile VirtualAllocEx VirtualFreeEx WaitForSingleObject WideCharToMultiByte WriteProcessMemory lstrlenW AttachConsole CopyFileExW CreateDirectoryW CreateFileW CreateIoCompletionPort CreateMutexW CreateProcessW CreateRemoteThread CreateThread CreateWaitableTimerExW DeleteFileW DeviceIoControl FindClose FindFirstFileExW FindNextFileW FlushFileBuffers GetConsoleMode GetConsoleOutputCP GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFinalPathNameByHandleW GetFullPathNameW GetQueuedCompletionStatusEx GetStdHandle GetTempPathW MoveFileExW PostQueuedCompletionStatus ReadConsoleW ReadFileEx RemoveDirectoryW SetFileInformationByHandle SetFilePointerEx SetFileTime SetStdHandle WriteConsoleW WriteFileEx DeleteCriticalSection EnterCriticalSection InitializeCriticalSection LeaveCriticalSection RaiseException RtlUnwindEx VirtualProtect VirtualQuery __C_specific_handler

user32

PrintWindow AdjustWindowRect AdjustWindowRectEx AllowSetForegroundWindow AppendMenuW AttachThreadInput ChangeDisplaySettingsExW ChangeWindowMessageFilterEx CheckMenuItem ClientToScreen ClipCursor CloseTouchInputHandle CreateAcceleratorTableW CreateIcon CreateMenu CreatePopupMenu CreateWindowExW DefWindowProcW DestroyAcceleratorTable DestroyIcon DestroyMenu DestroyWindow DispatchMessageA DispatchMessageW DrawIconEx DrawMenuBar DrawTextW EnableMenuItem EnableWindow EnumChildWindows EnumDisplayMonitors EnumWindows FillRect FindWindowExW FindWindowW FlashWindowEx GetActiveWindow GetAsyncKeyState GetClassNameW GetClientRect GetClipCursor GetCursorPos GetDC GetForegroundWindow GetKeyState GetKeyboardLayout GetKeyboardState GetMenu GetMenuBarInfo GetMenuItemInfoW GetMessageA GetMessageW GetMonitorInfoW GetParent GetRawInputData GetSystemMenu GetSystemMetrics GetTouchInputInfo GetUpdateRect GetWindow GetWindowDC GetWindowLongPtrW GetWindowLongW GetWindowPlacement GetWindowRect GetWindowTextLengthW GetWindowTextW GetWindowThreadProcessId InsertMenuW InvalidateRect InvalidateRgn IsIconic IsProcessDPIAware IsWindow IsWindowEnabled IsWindowVisible KillTimer LoadCursorW LoadIconW LoadImageW MapVirtualKeyExW MapVirtualKeyW MapWindowPoints MessageBoxW MonitorFromPoint MonitorFromRect MonitorFromWindow MsgWaitForMultipleObjectsEx OffsetRect PeekMessageW PostMessageW PostQuitMessage PostThreadMessageW RedrawWindow RegisterClassExW RegisterClassW RegisterRawInputDevices RegisterTouchWindow RegisterWindowMessageA ReleaseCapture ReleaseDC RemoveMenu ScreenToClient SendInput SendMessageW SetCapture SetCursor SetCursorPos SetFocus SetForegroundWindow SetMenu SetMenuItemInfoW SetParent SetPropW SetTimer SetWindowDisplayAffinity SetWindowLongPtrW SetWindowLongW SetWindowPlacement SetWindowPos SetWindowRgn SetWindowTextW ShowCursor ShowWindow SystemParametersInfoA SystemParametersInfoW ToUnicodeEx TrackMouseEvent TrackPopupMenu TranslateAcceleratorW TranslateMessage UpdateWindow ValidateRect VkKeyScanW

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

comctl32

DefSubclassProc RemoveWindowSubclass SetWindowSubclass TaskDialogIndirect

dwmapi

DwmEnableBlurBehindWindow DwmGetWindowAttribute DwmSetWindowAttribute

gdi32

BitBlt CombineRgn CreateCompatibleBitmap CreateCompatibleDC CreateDIBSection CreateRectRgn CreateSolidBrush DeleteDC DeleteObject GetDIBits GetDeviceCaps SelectObject SetBkMode SetTextColor

ntdll

RtlNtStatusToDosError NtCancelIoFileEx NtDeviceIoControlFile NtOpenFile NtReadFile NtWriteFile RtlGetVersion NtCreateNamedPipeFile

ole32

CoCreateFreeThreadedMarshaler CoCreateInstance CoInitializeEx CoTaskMemAlloc CoTaskMemFree CoUninitialize OleInitialize RegisterDragDrop RevokeDragDrop

oleaut32

GetErrorInfo SetErrorInfo SysFreeString SysStringLen

shell32

DragFinish DragQueryFileW SHAppBarMessage SHCreateItemFromParsingName SHGetKnownFolderPath ShellExecuteW Shell_NotifyIconGetRect Shell_NotifyIconW

shlwapi

SHCreateMemStream

ws2_32

WSACleanup WSADuplicateSocketW WSAGetLastError WSARecv WSASend WSASocketW WSAStartup accept bind closesocket connect freeaddrinfo getaddrinfo getpeername getsockname getsockopt ioctlsocket listen recv select send setsockopt shutdown

api-ms-win-crt-environment-l1-1-0

__p__environ

api-ms-win-crt-heap-l1-1-0

_set_new_mode calloc free malloc

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-math-l1-1-0

__setusermatherr floor pow round roundf trunc

api-ms-win-crt-private-l1-1-0

memcmp memcpy memmove

api-ms-win-crt-runtime-l1-1-0

_set_app_type __p___argc __p___argv _cexit _configure_narrow_argv _crt_atexit _exit _fpreset _initialize_narrow_environment _initterm _initterm_e _set_invalid_parameter_handler abort exit signal

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf fflush setvbuf

api-ms-win-crt-string-l1-1-0

memset strlen strncmp wcslen

Name

.text

Size

4.3MB

Virtual Size

4.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

7.7MB

Virtual Size

7.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

90KB

Virtual Size

89KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

126KB

Virtual Size

125KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

42KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

18KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-26_a2347e98c331e577f3abcc463c3ac68b_akira_glassworm_icedid_quasar-rat

PE Signature issue

advapi32

bcrypt

crypt32

kernel32

user32

bcryptprimitives

api-ms-win-core-synch-l1-2-0

comctl32

dwmapi

gdi32

ntdll

ole32

oleaut32

shell32

shlwapi

ws2_32

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

generic