General
- Target 2026-05-11_8ce1e70382b0838afcae984e3948eaf1_coinminer_elex_glassworm_icedid_njrat
- Size 4.0MB
- Sample260511-eqjk4sa18v
- SHA256 169c1d432a58c08f635415e8d41b429e31fa053745428cfa7c1afe8b18a7b0bf
- MD5 8ce1e70382b0838afcae984e3948eaf1
- SHA1 9be60d867d9e5cc580cf70a6020829707d8899bd
- SHA512 1fc79e3ba3b4866c333b32236ce40df122210d713839e948259776358719198ee019b72a9cd4f9e0c4234d43950c387b4322f7e0a1705280b67103f464be8ef6
- SSDEEP 98304:xE3PnLrHp/qKm2/Sb/gqAZj+UzKb3HtFp:0rRb/G8+Hp
- TLSH T17F165853EB814AD5F3890536DE548100D32AF9299BEB1321346C224DDFA7387BF65A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-11_8ce1e70382b0838afcae984e3948eaf1_coinminer_elex_glassworm_icedid_njrat.exe
Resource
win10v2004-20260130-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-11_8ce1e70382b0838afcae984e3948eaf1_coinminer_elex_glassworm_icedid_njrat.exe
Resource
win11-20260130-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-11_8ce1e70382b0838afcae984e3948eaf1_coinminer_elex_glassworm_icedid_njrat
- Size 4.0MB
- SHA256 169c1d432a58c08f635415e8d41b429e31fa053745428cfa7c1afe8b18a7b0bf
- MD5 8ce1e70382b0838afcae984e3948eaf1
- SHA1 9be60d867d9e5cc580cf70a6020829707d8899bd
- SHA512 1fc79e3ba3b4866c333b32236ce40df122210d713839e948259776358719198ee019b72a9cd4f9e0c4234d43950c387b4322f7e0a1705280b67103f464be8ef6
- SSDEEP 98304:xE3PnLrHp/qKm2/Sb/gqAZj+UzKb3HtFp:0rRb/G8+Hp
- TLSH T17F165853EB814AD5F3890536DE548100D32AF9299BEB1321346C224DDFA7387BF65A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of file extensions in Explorer
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.