General
- Target 2026-07-06_5dbf81e81dc80eab2a33adfa461206ba_coinminer_glassworm_icedid_njrat_remcos_ryuk
- Size 13.8MB
- Sample260707-d3xstsd17n
- SHA256 c4eb12b198f400e99d22c22ad5addbb685f2ee96f8e22fed500cbfa45eb05900
- MD5 5dbf81e81dc80eab2a33adfa461206ba
- SHA1 e48109392146946f70a43d1fe9f15922fb941b21
- SHA512 b2ef4fb8c66155b9c3534ff3d08ed57744fa711d9c0dc53089902b5e5afe3844574b78296577b6be0c0ac2cfd1747966b9603a708c3318e5f0629cc9e753c135
- SSDEEP 98304:84+Izqt5GNeo37vAP0ulyxnTgiEDcBLhmuvlOVzouOuUtEVj6ia:84+IG74rvAP8TgiEctOVBJ+b
- TLSH T1A1E67C1D36544090C0E3C178C753A6A3EBB074599B3397F7718D992D1FB3AE18A7AE22
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_5dbf81e81dc80eab2a33adfa461206ba_coinminer_glassworm_icedid_njrat_remcos_ryuk.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_5dbf81e81dc80eab2a33adfa461206ba_coinminer_glassworm_icedid_njrat_remcos_ryuk.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_5dbf81e81dc80eab2a33adfa461206ba_coinminer_glassworm_icedid_njrat_remcos_ryuk
- Size 13.8MB
- SHA256 c4eb12b198f400e99d22c22ad5addbb685f2ee96f8e22fed500cbfa45eb05900
- MD5 5dbf81e81dc80eab2a33adfa461206ba
- SHA1 e48109392146946f70a43d1fe9f15922fb941b21
- SHA512 b2ef4fb8c66155b9c3534ff3d08ed57744fa711d9c0dc53089902b5e5afe3844574b78296577b6be0c0ac2cfd1747966b9603a708c3318e5f0629cc9e753c135
- SSDEEP 98304:84+Izqt5GNeo37vAP0ulyxnTgiEDcBLhmuvlOVzouOuUtEVj6ia:84+IG74rvAP8TgiEctOVBJ+b
- TLSH T1A1E67C1D36544090C0E3C178C753A6A3EBB074599B3397F7718D992D1FB3AE18A7AE22
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.