General
- Target 2026-07-04_3ef3418467bcc8385c960ad9f4c9bca8_coinminer_glassworm_icedid_luca-stealer_njrat_stealc
- Size 7.0MB
- Sample260704-xtnncagt5m
- SHA256 8cdb4f3ee11363b28d8c22db05cc185735d0303e978aab68b9434875c16f13b6
- MD5 3ef3418467bcc8385c960ad9f4c9bca8
- SHA1 8746ba09acce789917092e12068f0ec523707b73
- SHA512 338a5b5d9408d85dea873539e50221d33006ee02520022eb2a4d34cd8b3b33966c045541e0e88cfbc689d1bcf4350ab5b0925c42658a725411804be34a7869d6
- SSDEEP 98304:vVRvLQ2R/ICv5lOtljhkjBfMQqmWcqbom6s+fYZ+Hos:v7vLjFICxlOtljhkjBfMHm9qbom64Z
- TLSH T194768D68A2AC01E9E467D1BCC2465627D6B2BC691370DFDB16A49EE50F57BD02F3E300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_3ef3418467bcc8385c960ad9f4c9bca8_coinminer_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_3ef3418467bcc8385c960ad9f4c9bca8_coinminer_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_3ef3418467bcc8385c960ad9f4c9bca8_coinminer_glassworm_icedid_luca-stealer_njrat_stealc
- Size 7.0MB
- SHA256 8cdb4f3ee11363b28d8c22db05cc185735d0303e978aab68b9434875c16f13b6
- MD5 3ef3418467bcc8385c960ad9f4c9bca8
- SHA1 8746ba09acce789917092e12068f0ec523707b73
- SHA512 338a5b5d9408d85dea873539e50221d33006ee02520022eb2a4d34cd8b3b33966c045541e0e88cfbc689d1bcf4350ab5b0925c42658a725411804be34a7869d6
- SSDEEP 98304:vVRvLQ2R/ICv5lOtljhkjBfMQqmWcqbom6s+fYZ+Hos:v7vLjFICxlOtljhkjBfMHm9qbom64Z
- TLSH T194768D68A2AC01E9E467D1BCC2465627D6B2BC691370DFDB16A49EE50F57BD02F3E300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.