General
- Target 2026-07-08_fb09dd668f5cd1d426486659ffa67e92_coinminer_glassworm_icedid_luca-stealer_njrat_stealc
- Size 6.8MB
- Sample260708-cfpchahs71
- SHA256 14ff5b3bb2eeb9fab53d82571e73d06a20f534268cde6bb6bbc8b8b66bbc9ad7
- MD5 fb09dd668f5cd1d426486659ffa67e92
- SHA1 03e0994ae7a22ed5291edc6ad1146ef643df1108
- SHA512 2952220ae96dfc580656db68d2eedfafa1f199348084249010b422ac77d9f2c92693399a6faaa0ab65fcc614d360450d271402d4517138d00105c08d68fa3d33
- SSDEEP 98304:K+JiKnZBMALEtX8Tt8GVAK+ee8my7qagP1DGgI1OXjdKLdVNBl:KuiKXDERUtNt+rP/K/LdV5
- TLSH T14976E056B7B400E4DC76C278ED968637FAB9743513A46ADF12B4C6A71B23AF0563E300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_fb09dd668f5cd1d426486659ffa67e92_coinminer_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_fb09dd668f5cd1d426486659ffa67e92_coinminer_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260706-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_fb09dd668f5cd1d426486659ffa67e92_coinminer_glassworm_icedid_luca-stealer_njrat_stealc
- Size 6.8MB
- SHA256 14ff5b3bb2eeb9fab53d82571e73d06a20f534268cde6bb6bbc8b8b66bbc9ad7
- MD5 fb09dd668f5cd1d426486659ffa67e92
- SHA1 03e0994ae7a22ed5291edc6ad1146ef643df1108
- SHA512 2952220ae96dfc580656db68d2eedfafa1f199348084249010b422ac77d9f2c92693399a6faaa0ab65fcc614d360450d271402d4517138d00105c08d68fa3d33
- SSDEEP 98304:K+JiKnZBMALEtX8Tt8GVAK+ee8my7qagP1DGgI1OXjdKLdVNBl:KuiKXDERUtNt+rP/K/LdV5
- TLSH T14976E056B7B400E4DC76C278ED968637FAB9743513A46ADF12B4C6A71B23AF0563E300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Indicator Removal: Clear Windows Event Logs
Clear Windows Event Logs to hide the activity of an intrusion.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext