General
- Target 2026-07-06_9a138d3feca78ad1aec1fa4b61b56546_coinminer_glassworm_icedid_njrat_remcos_sliver_vidar
- Size 14.4MB
- Sample260707-cg6ceacy4m
- SHA256 ec66e33784d812c57d53e47830ab5be63c955f3fd495478b2296925828aa3428
- MD5 9a138d3feca78ad1aec1fa4b61b56546
- SHA1 c5b2c4b7ad389247c9022dae688c4c1bbe954a8b
- SHA512 e92abbc33aaff44aa5a95883bbd30926a820161b813fe359d479c0d2ff456e6005472f11d8c95d624b0251141b8d23b5fca0539e0c2df2ebc0aec492a351e07c
- SSDEEP 196608:l9Oqr8U3MN0v1vPl6eR3DjdZTK8+RDJ3oGhJJ6QV10JJtC:vVMN0v9Ek3DRZD+RmGnJVV2JDC
- TLSH T1A0E68D5E639400A8D0E3C138D6037A53E6B2741657B297EB328E512A1F775F19E3FE22
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_9a138d3feca78ad1aec1fa4b61b56546_coinminer_glassworm_icedid_njrat_remcos_sliver_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_9a138d3feca78ad1aec1fa4b61b56546_coinminer_glassworm_icedid_njrat_remcos_sliver_vidar.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_9a138d3feca78ad1aec1fa4b61b56546_coinminer_glassworm_icedid_njrat_remcos_sliver_vidar
- Size 14.4MB
- SHA256 ec66e33784d812c57d53e47830ab5be63c955f3fd495478b2296925828aa3428
- MD5 9a138d3feca78ad1aec1fa4b61b56546
- SHA1 c5b2c4b7ad389247c9022dae688c4c1bbe954a8b
- SHA512 e92abbc33aaff44aa5a95883bbd30926a820161b813fe359d479c0d2ff456e6005472f11d8c95d624b0251141b8d23b5fca0539e0c2df2ebc0aec492a351e07c
- SSDEEP 196608:l9Oqr8U3MN0v1vPl6eR3DjdZTK8+RDJ3oGhJJ6QV10JJtC:vVMN0v9Ek3DRZD+RmGnJVV2JDC
- TLSH T1A0E68D5E639400A8D0E3C138D6037A53E6B2741657B297EB328E512A1F775F19E3FE22
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.