General
- Target 2026-07-01_571914b651383edf8c3eb26a0f08ffe9_coinminer_glassworm_icedid_luca-stealer_njrat_stealc
- Size 22.1MB
- Sample260701-lr5cjads4x
- SHA256 e27784833910c1a3d956dabec258e7b36f9880bd914a8e684e50e74d3e187f90
- MD5 571914b651383edf8c3eb26a0f08ffe9
- SHA1 0d783c853ea7f2bd0fe4a9a5cc4eee3d4a8e4887
- SHA512 ae6e8653469e5815c22c130297359329e44da839e972193a7e3a5833de9de0fbc5d1eda2b874b56cf0967cf0641d77cd4d9f054cea498cda9923ec1a4afd69a3
- SSDEEP 393216:lkFCUatKWEe6J+FeK/Ra+MoIrJ+FeiviLLFhO8uWgDvuXhBYxegh81:lT5isPMoI1qivFhOb7uXhuxeZ
- TLSH T1C937F197B79001E8D86AC238C6469637F3B1B8155370A7CF2AE4D7652F23AD45E3EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-01_571914b651383edf8c3eb26a0f08ffe9_coinminer_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_571914b651383edf8c3eb26a0f08ffe9_coinminer_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_571914b651383edf8c3eb26a0f08ffe9_coinminer_glassworm_icedid_luca-stealer_njrat_stealc
- Size 22.1MB
- SHA256 e27784833910c1a3d956dabec258e7b36f9880bd914a8e684e50e74d3e187f90
- MD5 571914b651383edf8c3eb26a0f08ffe9
- SHA1 0d783c853ea7f2bd0fe4a9a5cc4eee3d4a8e4887
- SHA512 ae6e8653469e5815c22c130297359329e44da839e972193a7e3a5833de9de0fbc5d1eda2b874b56cf0967cf0641d77cd4d9f054cea498cda9923ec1a4afd69a3
- SSDEEP 393216:lkFCUatKWEe6J+FeK/Ra+MoIrJ+FeiviLLFhO8uWgDvuXhBYxegh81:lT5isPMoI1qivFhOb7uXhuxeZ
- TLSH T1C937F197B79001E8D86AC238C6469637F3B1B8155370A7CF2AE4D7652F23AD45E3EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
XMRig Miner payload
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.