General
- Target 2026-07-06_fbd8446f6cce0c34943e4962b8e7506e_coinminer_glassworm_icedid_njrat_remcos_vidar
- Size 13.4MB
- Sample260706-3rlnvsdv5v
- SHA256 67370ede8594de060293fb2a0c6b10b5c5b97f60d4b41edd1356faecc35bf78a
- MD5 fbd8446f6cce0c34943e4962b8e7506e
- SHA1 8674a34186350f901a53434b0b3996ab75e46923
- SHA512 326ed2f2bddd1d23e47188392dd51e791b3ecf5442b3fe87b7bcdd8fc33446db98c0c9772736c70300462d4e97a8496b8fd479c5bc337cfffd864335781c5efc
- SSDEEP 196608:fPwKVXXFy7aVgPoEiHrr54dDqlgxyh1PtfCe8ltg2if7Pztt:7oaVgPoZr54ZqTJfyltaf7Pztt
- TLSH T1E2E68D1E639400A8D0E2C138D6037E53E6B274165BB396FB318D552A1FB76E19E3FE21
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_fbd8446f6cce0c34943e4962b8e7506e_coinminer_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_fbd8446f6cce0c34943e4962b8e7506e_coinminer_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_fbd8446f6cce0c34943e4962b8e7506e_coinminer_glassworm_icedid_njrat_remcos_vidar
- Size 13.4MB
- SHA256 67370ede8594de060293fb2a0c6b10b5c5b97f60d4b41edd1356faecc35bf78a
- MD5 fbd8446f6cce0c34943e4962b8e7506e
- SHA1 8674a34186350f901a53434b0b3996ab75e46923
- SHA512 326ed2f2bddd1d23e47188392dd51e791b3ecf5442b3fe87b7bcdd8fc33446db98c0c9772736c70300462d4e97a8496b8fd479c5bc337cfffd864335781c5efc
- SSDEEP 196608:fPwKVXXFy7aVgPoEiHrr54dDqlgxyh1PtfCe8ltg2if7Pztt:7oaVgPoZr54ZqTJfyltaf7Pztt
- TLSH T1E2E68D1E639400A8D0E2C138D6037E53E6B274165BB396FB318D552A1FB76E19E3FE21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.