General

  • Target
    2026-06-26_ec7eb5898cd1aabe216e3382679bc16a_coinminer_glassworm_icedid_megazord_njrat_ryuk_stealc_zxxz
  • Size 86.1MB
  • Sample260629-nd2qlabx5w
  • SHA256 577a346eee0b46485879efa4f068f48de191582650e90210ad2eecbaf9004a9f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Targets

    • Target
      2026-06-26_ec7eb5898cd1aabe216e3382679bc16a_coinminer_glassworm_icedid_megazord_njrat_ryuk_stealc_zxxz
    • Size 86.1MB
    • SHA256 577a346eee0b46485879efa4f068f48de191582650e90210ad2eecbaf9004a9f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v16

Tasks