General
- Target 2026-06-27_b45e4f43935ff2df78e5c30c9223e3df_coinminer_glassworm_icedid_megazord_njrat_ryuk_stealc_zxxz
- Size 86.1MB
- Sample260629-d84tbsdw3j
- SHA256 92b3282322370c2e496f6aefd15d1b100153b9394ecf9735e5da844e3a75498d
- MD5 b45e4f43935ff2df78e5c30c9223e3df
- SHA1 8b93047cb058ae2ac3254f4069329662b4640a0a
- SHA512 c7d851d223d52a67485c9f1fa38eac1ac8235952e254c9dfade78c238a27458e58b65e6722685b400cb208b02b47ade29484950bef7f51363bb939b3435112b1
- SSDEEP 786432:fAZqtFi3zQzwBs6vNtcZY5Dfw3pgPVlcmXW:fAZui3zQz2jOZKft
- TLSH T10A187D03B3A705D5E8F7DA3196E65223A932BC066F3085DF324C17262F73AE05A76B51
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-27_b45e4f43935ff2df78e5c30c9223e3df_coinminer_glassworm_icedid_megazord_njrat_ryuk_stealc_zxxz.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_b45e4f43935ff2df78e5c30c9223e3df_coinminer_glassworm_icedid_megazord_njrat_ryuk_stealc_zxxz
- Size 86.1MB
- SHA256 92b3282322370c2e496f6aefd15d1b100153b9394ecf9735e5da844e3a75498d
- MD5 b45e4f43935ff2df78e5c30c9223e3df
- SHA1 8b93047cb058ae2ac3254f4069329662b4640a0a
- SHA512 c7d851d223d52a67485c9f1fa38eac1ac8235952e254c9dfade78c238a27458e58b65e6722685b400cb208b02b47ade29484950bef7f51363bb939b3435112b1
- SSDEEP 786432:fAZqtFi3zQzwBs6vNtcZY5Dfw3pgPVlcmXW:fAZui3zQz2jOZKft
- TLSH T10A187D03B3A705D5E8F7DA3196E65223A932BC066F3085DF324C17262F73AE05A76B51
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates processes with tasklist