General
- Target 2026-06-26_ec7eb5898cd1aabe216e3382679bc16a_coinminer_glassworm_icedid_megazord_njrat_ryuk_stealc_zxxz
- Size 86.1MB
- Sample260629-nd2qlabx5w
- SHA256 577a346eee0b46485879efa4f068f48de191582650e90210ad2eecbaf9004a9f
- MD5 ec7eb5898cd1aabe216e3382679bc16a
- SHA1 2f21caf1c38c6a518d32071fb02a78acb0ca5271
- SHA512 ceed21bf4f86e48135c9dcf306c4b5a4f1a7b37a265a496f89e633f077762bf31c9421713c2591bf334d7d93f44285d83e24750fcfbe952914fab691bdbe40a1
- SSDEEP 786432:bAZqtFi3zQzwBs6vNtcZY5Dfw3pgPVlcmXW:bAZui3zQz2jOZKft
- TLSH T115187D03B3A705D5E8F7DA3196E65223A932BC066F3085DF324C17262F73AE05A76B51
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-26_ec7eb5898cd1aabe216e3382679bc16a_coinminer_glassworm_icedid_megazord_njrat_ryuk_stealc_zxxz.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_ec7eb5898cd1aabe216e3382679bc16a_coinminer_glassworm_icedid_megazord_njrat_ryuk_stealc_zxxz
- Size 86.1MB
- SHA256 577a346eee0b46485879efa4f068f48de191582650e90210ad2eecbaf9004a9f
- MD5 ec7eb5898cd1aabe216e3382679bc16a
- SHA1 2f21caf1c38c6a518d32071fb02a78acb0ca5271
- SHA512 ceed21bf4f86e48135c9dcf306c4b5a4f1a7b37a265a496f89e633f077762bf31c9421713c2591bf334d7d93f44285d83e24750fcfbe952914fab691bdbe40a1
- SSDEEP 786432:bAZqtFi3zQzwBs6vNtcZY5Dfw3pgPVlcmXW:bAZui3zQz2jOZKft
- TLSH T115187D03B3A705D5E8F7DA3196E65223A932BC066F3085DF324C17262F73AE05A76B51
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates processes with tasklist