General

  • Target
    2026-06-27_b45e4f43935ff2df78e5c30c9223e3df_coinminer_glassworm_icedid_megazord_njrat_ryuk_stealc_zxxz
  • Size 86.1MB
  • Sample260629-d84tbsdw3j
  • SHA256 92b3282322370c2e496f6aefd15d1b100153b9394ecf9735e5da844e3a75498d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Targets

    • Target
      2026-06-27_b45e4f43935ff2df78e5c30c9223e3df_coinminer_glassworm_icedid_megazord_njrat_ryuk_stealc_zxxz
    • Size 86.1MB
    • SHA256 92b3282322370c2e496f6aefd15d1b100153b9394ecf9735e5da844e3a75498d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v16

Tasks