General
- Target 2026-06-02_3c8099a06531afcf8501cce24b682ec1_coinminer_glassworm_icedid_njrat_stealc
- Size 17.7MB
- Sample260602-tx24csat81
- SHA256 65ae04aca16d9866da92847b26f18e50720a65b7f75aebd8fb517969b73d3af7
- MD5 3c8099a06531afcf8501cce24b682ec1
- SHA1 7bcdbe17f8015b5ef304cfbc81f06d0ca0929f1e
- SHA512 b00347626f4d60686b4a2e79617b9c766139ce72d88152195374419679b273710c1fc99e84583c5b3e06696aa09792b7ab4d8ffe07c181667934ce8c54471983
- SSDEEP 393216:3HNR5B0VNrNTn16f3uymxGxgtIHgIKIG7fNmkSqv:3Hs84IKl7fN3v
- TLSH T173179E58A4BAD2D8D22B8178D3521B16FB61749403642FFF11B5CBF01E97EE42A7E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
5 signatures
Behavioral task
behavioral1
Sample
2026-06-02_3c8099a06531afcf8501cce24b682ec1_coinminer_glassworm_icedid_njrat_stealc.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_3c8099a06531afcf8501cce24b682ec1_coinminer_glassworm_icedid_njrat_stealc.exe
Resource
win11-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_3c8099a06531afcf8501cce24b682ec1_coinminer_glassworm_icedid_njrat_stealc
- Size 17.7MB
- SHA256 65ae04aca16d9866da92847b26f18e50720a65b7f75aebd8fb517969b73d3af7
- MD5 3c8099a06531afcf8501cce24b682ec1
- SHA1 7bcdbe17f8015b5ef304cfbc81f06d0ca0929f1e
- SHA512 b00347626f4d60686b4a2e79617b9c766139ce72d88152195374419679b273710c1fc99e84583c5b3e06696aa09792b7ab4d8ffe07c181667934ce8c54471983
- SSDEEP 393216:3HNR5B0VNrNTn16f3uymxGxgtIHgIKIG7fNmkSqv:3Hs84IKl7fN3v
- TLSH T173179E58A4BAD2D8D22B8178D3521B16FB61749403642FFF11B5CBF01E97EE42A7E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects executables (downlaoders) containing URLs to raw contents of a paste
- Custom signature
Detects executables Discord URL observed in first stage droppers
- Custom signature
Detects executables containing URLs to raw contents of a Github gist
- Custom signature
Detects executables packed with ConfuserEx Mod
Loads dropped DLL