General
- Target 2026-07-06_4a08042ddc02cf5258da80ffcc56c671_coinminer_glassworm_icedid_njrat_remcos_ryuk
- Size 13.8MB
- Sample260707-ekcwdaev8l
- SHA256 a200dced2a12329f7fc82b766d713baecf30238eba35800e0bdfee55dea12d32
- MD5 4a08042ddc02cf5258da80ffcc56c671
- SHA1 1fdbcdb8e46cef41d535e0d11c8c2d083e29d3ce
- SHA512 213f6e562cd1ffbd3769e3320651a010e86a48a76bfb084ee428c8f41f4b6c82252e2599002e2b661b401cbe0c0480fecd11504412556bb4a18638a77e53682c
- SSDEEP 98304:fenMd4jxPgUbOdp76oLuY21l3uiEDcBLhmuvlOVFomd0mYmjGBIWc/n:fenMdmxzOdpjP2l3uiEctOVicP
- TLSH T16AE67B1E32544090C1E3C174C753A6A3EBB074599B3397F7718D992D1FB3AE18A7AE22
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_4a08042ddc02cf5258da80ffcc56c671_coinminer_glassworm_icedid_njrat_remcos_ryuk.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_4a08042ddc02cf5258da80ffcc56c671_coinminer_glassworm_icedid_njrat_remcos_ryuk.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_4a08042ddc02cf5258da80ffcc56c671_coinminer_glassworm_icedid_njrat_remcos_ryuk
- Size 13.8MB
- SHA256 a200dced2a12329f7fc82b766d713baecf30238eba35800e0bdfee55dea12d32
- MD5 4a08042ddc02cf5258da80ffcc56c671
- SHA1 1fdbcdb8e46cef41d535e0d11c8c2d083e29d3ce
- SHA512 213f6e562cd1ffbd3769e3320651a010e86a48a76bfb084ee428c8f41f4b6c82252e2599002e2b661b401cbe0c0480fecd11504412556bb4a18638a77e53682c
- SSDEEP 98304:fenMd4jxPgUbOdp76oLuY21l3uiEDcBLhmuvlOVFomd0mYmjGBIWc/n:fenMdmxzOdpjP2l3uiEctOVicP
- TLSH T16AE67B1E32544090C1E3C174C753A6A3EBB074599B3397F7718D992D1FB3AE18A7AE22
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.