General
- Target 2026-07-07_346c50e26d41cb2c35b100affa63a04c_coinminer_glassworm_icedid_luca-stealer_njrat_stealc
- Size 6.8MB
- Sample260707-twcr3sat2q
- SHA256 c5b669f15f698e41368983d6b5e51952fbee1885c913b872fb7596cda8278fb2
- MD5 346c50e26d41cb2c35b100affa63a04c
- SHA1 d3ad10bb6a52723c9940dbb14b2a87af9d92bd74
- SHA512 bc35368f49e3be0ba4d373535d29a5497f5b6954bc69a08a0041326841a1b1b84169d7efca465f2f6f8e8b526ad260c4f65410385d8cc235f86c5c47f75d64b1
- SSDEEP 98304:K+JiKnZBMALEtX8Tt8GVAK+ee8myyqagP1DGgI1OXjdKLdVNBl:KuiKXDERUtNt+oP/K/LdV5
- TLSH T17676E056B7B400E4DC76C278ED968637FAB9743513A46ADF12B4C6A71B23AF0563E300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_346c50e26d41cb2c35b100affa63a04c_coinminer_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_346c50e26d41cb2c35b100affa63a04c_coinminer_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260706-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_346c50e26d41cb2c35b100affa63a04c_coinminer_glassworm_icedid_luca-stealer_njrat_stealc
- Size 6.8MB
- SHA256 c5b669f15f698e41368983d6b5e51952fbee1885c913b872fb7596cda8278fb2
- MD5 346c50e26d41cb2c35b100affa63a04c
- SHA1 d3ad10bb6a52723c9940dbb14b2a87af9d92bd74
- SHA512 bc35368f49e3be0ba4d373535d29a5497f5b6954bc69a08a0041326841a1b1b84169d7efca465f2f6f8e8b526ad260c4f65410385d8cc235f86c5c47f75d64b1
- SSDEEP 98304:K+JiKnZBMALEtX8Tt8GVAK+ee8myyqagP1DGgI1OXjdKLdVNBl:KuiKXDERUtNt+oP/K/LdV5
- TLSH T17676E056B7B400E4DC76C278ED968637FAB9743513A46ADF12B4C6A71B23AF0563E300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Indicator Removal: Clear Windows Event Logs
Clear Windows Event Logs to hide the activity of an intrusion.
Suspicious use of NtSetInformationThreadHideFromDebugger
Suspicious use of SetThreadContext