General
- Target 2026-07-01_970dc7ce3005594959c953fe48075d24_coinminer_glassworm_icedid_luca-stealer_njrat_stealc
- Size 7.1MB
- Sample260702-aa91xaf12l
- SHA256 d4b1ff4902182e4be51394bec0dceea11f833fc4fa57340626c202e251ef4533
- MD5 970dc7ce3005594959c953fe48075d24
- SHA1 65a453dfe5224f9ad303f9ec5c85269199317437
- SHA512 125c7d80f483ba92ee694fe6f6f5cdabce5d60862e05e415bb77604479372909fbda4065af849e5ed2b9ee0a0d88c4558cd36338565e3c33448c5ae0f8d9e871
- SSDEEP 98304:uVRvLQ2R/I4v5lOtljhkjBfMQqmWcqbom6sbplUp+Z:u7vLjFI4xlOtljhkjBfMHm9qbom6Pp
- TLSH T1E3768D69A3AC0069ECA7D17DC2465627D6B27C691370EBDB19A39EE40F57BD0273E300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_970dc7ce3005594959c953fe48075d24_coinminer_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_970dc7ce3005594959c953fe48075d24_coinminer_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_970dc7ce3005594959c953fe48075d24_coinminer_glassworm_icedid_luca-stealer_njrat_stealc
- Size 7.1MB
- SHA256 d4b1ff4902182e4be51394bec0dceea11f833fc4fa57340626c202e251ef4533
- MD5 970dc7ce3005594959c953fe48075d24
- SHA1 65a453dfe5224f9ad303f9ec5c85269199317437
- SHA512 125c7d80f483ba92ee694fe6f6f5cdabce5d60862e05e415bb77604479372909fbda4065af849e5ed2b9ee0a0d88c4558cd36338565e3c33448c5ae0f8d9e871
- SSDEEP 98304:uVRvLQ2R/I4v5lOtljhkjBfMQqmWcqbom6sbplUp+Z:u7vLjFI4xlOtljhkjBfMHm9qbom6Pp
- TLSH T1E3768D69A3AC0069ECA7D17DC2465627D6B27C691370EBDB19A39EE40F57BD0273E300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.