ff58bf6d8d27e3624292d065535aaafb88f3ebd210b93aef6384a12ba106c87d

Analysis

max time kernel
149s
max time network
116s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
02/05/2026, 11:53

Target
2026-05-02_6a8336a5e1b0ad4c8edc7fdc76f5ae20_coinminer_glassworm_icedid_njrat_stealc.exe
Size 13.7MB
Sample260502-n2dnnset4z
SHA256 ff58bf6d8d27e3624292d065535aaafb88f3ebd210b93aef6384a12ba106c87d
MD5 6a8336a5e1b0ad4c8edc7fdc76f5ae20
SHA1 bb853c3fe99135c94eac6e05c510f679eb5a7286
SHA512 a6bd3d4f309c63f961d3a051b0cce0258c61fd32391b695ba5118a0bba0f055558d6f2ae761e2c957c1f5814154d93b0f49230425d3ef334804ae15029d53886
SSDEEP 196608:GeofXpkKUwhgqtj5hTmWl3FnULnxQOd+YTHu+E2R:ZoyKxhftj5hTmWl3FnUbxQOg+Op2R
TLSH
T16DE68D5550B8E1ECE67BC078D3830756EB69719403352BFB21B5CAF01BA2ED52B38762
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
784	2026-05-02_6a8336a5e1b0ad4c8edc7fdc76f5ae20_coinminer_glassworm_icedid_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-02_6a8336a5e1b0ad4c8edc7fdc76f5ae20_coinminer_glassworm_icedid_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-02_6a8336a5e1b0ad4c8edc7fdc76f5ae20_coinminer_glassworm_icedid_njrat_stealc.exe"
1⤵
- Loads dropped DLL
PID:784

UIDBypassDll.dll

Path C:\Users\Admin\AppData\Local\Temp\UIDBypassDll.dll
Size 13.1MB
SHA256 de99637362e03d353e0f411dad482ce6c3dcb0b640e1c9baa28bc5d18b60c221
MD5 e8bdfe9777fec4363053446e34e2f54c
SHA1 6ce561347c7a12735a0aa47ddc9335481eb8d63b
SHA512 9c58b8d7342b18173578f6a6f0b2b93afd849d7fc1f1022d8c16135a7ad48e1021386dcdeebf3096e02f6031e0f926926c6431f66707843c0657b868b549ec00
SSDEEP 196608:8ofXpkKUwhgqtj5hTmWl3FnULnxQOd+YTHu+E2R:8oyKxhftj5hTmWl3FnUbxQOg+Op2R
TLSH
T1AAD68D5550B8E1ECE67BC07CD3830756EB69719403252BFB21B5CAF01BA2ED52B38762
MD5 SHA1 SHA512 SSDEEP TLSH