2026-11-01_bb7ebe5d0470e462e540d0c7bf17cd3b_akira_coinminer_glassworm_icedid_njrat_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-01_bb7ebe5d0470e462e540d0c7bf17cd3b_akira_coinminer_glassworm_icedid_njrat_vidar
Size 3.4MB
Sample261102-mdafnseg45
SHA256 984c528b66b07a79dc496aa271680efe1d8b5ae1f96b33ef996c4de4114e03b5
MD5 bb7ebe5d0470e462e540d0c7bf17cd3b
SHA1 dfd0ca004a9787953069931fd04ab503ca3d12e5
SHA512 493ce3ae729d09424242b2b1e01c5d94d32ac6c7a81f3b0064341d3e8c561c0f96ab6cad68dc461fb04ed0112c539693144fe29f31b119204e15568e4153fbce
SSDEEP 49152:jXVwASODGtlqqFIU6itBCyLZKyK82XpRU2Vo9X7lTQ9YsPOh5PW6NBdXS/Gil+yu:YC+iShLAeNBtS4A6/m
TLSH
T106F5BF56A7A800E8D477C138C95A8627E7F2B45917B09BDB06B4C6790F23BE25F3E710
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-01_bb7ebe5d0470e462e540d0c7bf17cd3b_akira_coinminer_glassworm_icedid_njrat_vidar

File Explorer

2026-11-01_bb7ebe5d0470e462e540d0c7bf17cd3b_akira_coinminer_glassworm_icedid_njrat_vidar

.exe 3.4MB

2026-11-01_bb7ebe5d0470e462e540d0c7bf17cd3b_akira_coinminer_glassworm_icedid_njrat_vidar

IMPHASH 70dc2f9e45b3a475faf99cf8d979348a
SHA256 984c528b66b07a79dc496aa271680efe1d8b5ae1f96b33ef996c4de4114e03b5
MD5 bb7ebe5d0470e462e540d0c7bf17cd3b
SHA1 dfd0ca004a9787953069931fd04ab503ca3d12e5
SHA512 493ce3ae729d09424242b2b1e01c5d94d32ac6c7a81f3b0064341d3e8c561c0f96ab6cad68dc461fb04ed0112c539693144fe29f31b119204e15568e4153fbce
SSDEEP 49152:jXVwASODGtlqqFIU6itBCyLZKyK82XpRU2Vo9X7lTQ9YsPOh5PW6NBdXS/Gil+yu:YC+iShLAeNBtS4A6/m
TLSH
T106F5BF56A7A800E8D477C138C95A8627E7F2B45917B09BDB06B4C6790F23BE25F3E710
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2130656

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ws2_32

WSASetLastError closesocket getnameinfo send recv getpeername freeaddrinfo getaddrinfo WSAGetLastError WSACleanup WSAStartup socket setsockopt select getsockopt ioctlsocket connect __WSAFDIsSet

kernel32

EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection GetCurrentThreadId SwitchToFiber DeleteFiber ConvertFiberToThread CreateFiberEx ConvertThreadToFiberEx LocalFree FormatMessageA SetLastError GetSystemTime SystemTimeToFileTime GetModuleHandleExW TlsAlloc TlsGetValue TlsSetValue TlsFree FindClose FindFirstFileW FindNextFileW MultiByteToWideChar WideCharToMultiByte PostQueuedCompletionStatus GetStdHandle GetEnvironmentVariableW GetFileType WriteFile GetModuleHandleW GetProcAddress RtlVirtualUnwind GetCurrentProcessId GetSystemTimeAsFileTime FreeLibrary LoadLibraryA LoadLibraryW GetConsoleMode SetConsoleMode ReadConsoleA ReadConsoleW WaitForSingleObject SetConsoleTextAttribute GetCurrentDirectoryW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale HeapReAlloc GetQueuedCompletionStatusEx CreateIoCompletionPort QueryPerformanceFrequency QueryPerformanceCounter VirtualFree VirtualAlloc GetCurrentProcess GetLastError CloseHandle GetFullPathNameW SetStdHandle FlushFileBuffers GetConsoleOutputCP SetFilePointerEx GetFileSizeEx FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap HeapSize WriteConsoleW SetEndOfFile FormatMessageW RtlUnwind HeapAlloc HeapFree GetCommandLineW GetCommandLineA DuplicateHandle WaitForSingleObjectEx Sleep SwitchToThread GetCurrentThread GetNativeSystemInfo TryEnterCriticalSection RtlPcToFileHeader EncodePointer DecodePointer RaiseException QueueUserWorkItem IsProcessorFeaturePresent CreateEventW GetTickCount GetCPInfo CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW SetEvent ResetEvent RtlCaptureContext RtlLookupFunctionEntry UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsDebuggerPresent GetStartupInfoW InitializeSListHead CreateTimerQueue SignalObjectAndWait CreateThread SetThreadPriority GetThreadPriority GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask RegisterWaitForSingleObject UnregisterWait GetThreadTimes FreeLibraryAndExitThread GetModuleFileNameW GetModuleHandleA LoadLibraryExW GetVersionExW VirtualProtect ReleaseSemaphore InterlockedPopEntrySList InterlockedPushEntrySList InterlockedFlushSList QueryDepthSList UnregisterWaitEx RtlUnwindEx ExitProcess GetTimeZoneInformation CreateFileW GetDriveTypeW GetFileInformationByHandle PeekNamedPipe SystemTimeToTzSpecificLocalTime FileTimeToSystemTime ReadFile SetConsoleCtrlHandler ExitThread

advapi32

CryptDecrypt AdjustTokenPrivileges LookupPrivilegeValueA DeregisterEventSource RegisterEventSourceW ReportEventW CryptAcquireContextW CryptReleaseContext CryptGenRandom CryptEnumProvidersW CryptSignHashW CryptDestroyHash CryptCreateHash OpenProcessToken CryptExportKey CryptGetUserKey CryptGetProvParam CryptSetHashParam CryptDestroyKey

crypt32

CertCloseStore CertEnumCertificatesInStore CertFindCertificateInStore CertDuplicateCertificateContext CertFreeCertificateContext CertGetCertificateContextProperty CertOpenStore

user32

GetUserObjectInformationW GetProcessWindowStation MessageBoxW

Name

.text

Size

2.4MB

Virtual Size

2.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

883KB

Virtual Size

882KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

49KB

Virtual Size

584KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

103KB

Virtual Size

102KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gehcont

Size

512B

Virtual Size

36B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

46KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

30KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-01_bb7ebe5d0470e462e540d0c7bf17cd3b_akira_coinminer_glassworm_icedid_njrat_vidar

ws2_32

kernel32

advapi32

crypt32

user32

generic