2026-07-08_fb09dd668f5cd1d426486659ffa67e92_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-08_fb09dd668f5cd1d426486659ffa67e92_coinminer_glassworm_icedid_luca-stealer_njrat_stealc
Size 6.8MB
Sample260708-cfpchahs71
SHA256 14ff5b3bb2eeb9fab53d82571e73d06a20f534268cde6bb6bbc8b8b66bbc9ad7
MD5 fb09dd668f5cd1d426486659ffa67e92
SHA1 03e0994ae7a22ed5291edc6ad1146ef643df1108
SHA512 2952220ae96dfc580656db68d2eedfafa1f199348084249010b422ac77d9f2c92693399a6faaa0ab65fcc614d360450d271402d4517138d00105c08d68fa3d33
SSDEEP 98304:K+JiKnZBMALEtX8Tt8GVAK+ee8my7qagP1DGgI1OXjdKLdVNBl:KuiKXDERUtNt+rP/K/LdV5
TLSH
T14976E056B7B400E4DC76C278ED968637FAB9743513A46ADF12B4C6A71B23AF0563E300
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-08_fb09dd668f5cd1d426486659ffa67e92_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

File Explorer

2026-07-08_fb09dd668f5cd1d426486659ffa67e92_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

.exe 6.8MB

2026-07-08_fb09dd668f5cd1d426486659ffa67e92_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

IMPHASH 3664652a2dc6263c19635c7c32117593
SHA256 14ff5b3bb2eeb9fab53d82571e73d06a20f534268cde6bb6bbc8b8b66bbc9ad7
MD5 fb09dd668f5cd1d426486659ffa67e92
SHA1 03e0994ae7a22ed5291edc6ad1146ef643df1108
SHA512 2952220ae96dfc580656db68d2eedfafa1f199348084249010b422ac77d9f2c92693399a6faaa0ab65fcc614d360450d271402d4517138d00105c08d68fa3d33
SSDEEP 98304:K+JiKnZBMALEtX8Tt8GVAK+ee8my7qagP1DGgI1OXjdKLdVNBl:KuiKXDERUtNt+rP/K/LdV5
TLSH
T14976E056B7B400E4DC76C278ED968637FAB9743513A46ADF12B4C6A71B23AF0563E300
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7145293

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

winmm

timeBeginPeriod timeGetDevCaps

ws2_32

inet_pton WSACleanup WSAGetLastError setsockopt WSAIoctl bind FreeAddrInfoW recv send WSASetLastError WSASend shutdown WSAStartup WSASocketW getsockname socket connect GetAddrInfoW WSARecv getsockopt htonl closesocket

ntdll

RtlVirtualUnwind RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlNtStatusToDosError RtlPcToFileHeader

ncrypt

BCryptGenRandom NCryptGetProperty NCryptFreeObject

crypt32

CertGetCertificateChain CertFreeCertificateContext CertFreeCertificateChainEngine CertAddCertificateContextToStore CertCloseStore PFXExportCertStoreEx CertSetCertificateContextProperty CertFreeCertificateChain CertOpenStore CertGetNameStringA CertGetCertificateContextProperty CertFindCertificateInStore CertCreateContext CryptAcquireCertificatePrivateKey CertCreateCertificateChainEngine CertVerifyCertificateChainPolicy

iphlpapi

SetCurrentThreadCompartmentId IcmpCloseHandle GetCurrentThreadCompartmentId IcmpSendEcho2Ex IcmpCreateFile

gdiplus

GdipFillEllipseI GdipCreateBitmapFromGraphics GdipSetTextRenderingHint GdipStringFormatGetGenericTypographic GdipMeasureString GdipGetImageGraphicsContext GdipFillRectangleI GdipGetFontCollectionFamilyCount GdipDeleteGraphics GdipDeleteStringFormat GdipGetFontCollectionFamilyList GdipGetImageWidth GdipDeletePen GdipDrawImageI GdipCreatePen1 GdipNewPrivateFontCollection GdipDeletePrivateFontCollection GdipPrivateAddMemoryFont GdipDrawString GdipSetStringFormatFlags GdipGetFontHeight GdipLoadImageFromStream GdiplusStartup GdiplusShutdown GdipImageSelectActiveFrame GdipDrawArcI GdipSetClipRectI GdipSetSolidFillColor GdipDrawBezierI GdipCreateFromHWND GdipSetPenWidth GdipGraphicsClear GdipFillPieI GdipCreateSolidFill GdipCreateFont GdipSetSmoothingMode GdipCreateFromHDC GdipDisposeImage GdipDrawImageRectI GdipDrawEllipseI GdipDeleteBrush GdipDrawPolygonI GdipSetPenColor GdipDrawPieI GdipDrawRectangleI GdipFillPolygonI GdipGetImageHeight GdipDeleteFont GdipDrawLineI

shlwapi

ord12

user32

GetKeyState SetCapture ReleaseCapture BeginPaint EndPaint GetMessageW DefWindowProcW PostMessageW SetProcessDpiAwarenessContext DestroyWindow SetWindowPos GetDpiForWindow CreateWindowExW PeekMessageW UnregisterClassW ShowWindow IsWindow DispatchMessageW SetTimer RegisterClassW TrackMouseEvent TranslateMessage LoadCursorA LoadIconA KillTimer PostQuitMessage SystemParametersInfoW ScreenToClient

advapi32

AdjustTokenPrivileges RegQueryValueExW LookupPrivilegeValueA OpenProcessToken RegCloseKey RegOpenKeyExW

kernel32

FreeLibraryAndExitThread GetModuleHandleExW ExitProcess ReadFile GetDriveTypeW PeekNamedPipe SystemTimeToTzSpecificLocalTime FileTimeToSystemTime GetModuleFileNameW FlsGetValue GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadConsoleW SetFilePointerEx GetFileSizeEx SetStdHandle HeapReAlloc ExitThread RaiseException OutputDebugStringW GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GetCPInfo GetStringTypeW GetACP GetLocaleInfoEx LocalFree EncodePointer GetExitCodeThread SwitchToThread WaitForSingleObjectEx FormatMessageA LoadLibraryExW GetTickCount64 SleepConditionVariableSRW TryAcquireSRWLockExclusive AreFileApisANSI GetFullPathNameW GetFileInformationByHandle GetOEMCP GetCurrentDirectoryW CreateFileW FindFirstFileExW GetTimeZoneInformation IsValidCodePage VirtualQuery FlsAlloc FlsFree GetSystemInfo GetNumaNodeProcessorMask FlsSetValue GetLargePageMinimum VirtualAlloc GetCurrentProcess VirtualFree VirtualProtect GetNumaHighestNodeNumber GetCurrentProcessId WriteFile GetFileType GetEnvironmentVariableW GetStdHandle WideCharToMultiByte FindNextFileW FindFirstFileW FindClose TlsFree TlsSetValue TlsGetValue GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap HeapSize WriteConsoleW SetEndOfFile LCMapStringEx LeaveCriticalSection SetPriorityClass WaitForSingleObject SetEvent CloseHandle CreateEventA InitializeCriticalSectionEx GetLastError DecodePointer DeleteCriticalSection MultiByteToWideChar EnterCriticalSection WakeAllConditionVariable WakeConditionVariable TlsAlloc InitializeCriticalSection GetCurrentProcessorNumberEx GetSystemTimeAdjustment GetActiveProcessorCount GetModuleHandleW GetSystemTimeAsFileTime QueryPerformanceCounter InitializeSListHead InterlockedPopEntrySList InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockShared InterlockedPushEntrySList QueryDepthSList GetCurrentThreadId ResetEvent SetThreadPriority CreateThread SetThreadIdealProcessor SetThreadGroupAffinity HeapCreate HeapFree GetLogicalProcessorInformationEx QueryPerformanceFrequency HeapAlloc HeapDestroy GlobalMemoryStatusEx CancelIo PostQueuedCompletionStatus LoadLibraryA CancelIoEx GetQueuedCompletionStatusEx GetCurrentProcessorNumber GetProcAddress FreeLibrary CreateIoCompletionPort SetFileCompletionNotificationModes Sleep SetLastError GetSystemTime SystemTimeToFileTime InitializeCriticalSectionAndSpinCount

Name

.text

Size

2.5MB

Virtual Size

2.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.9MB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

307KB

Virtual Size

543KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

95KB

Virtual Size

94KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.4>n

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.]W;

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

..5R

Size

520KB

Virtual Size

519KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-08_fb09dd668f5cd1d426486659ffa67e92_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

winmm

ws2_32

ntdll

ncrypt

crypt32

iphlpapi

gdiplus

shlwapi

user32

advapi32

kernel32

generic