General
- Target 2026-07-08_1ce48265887c5632b6792f8f9e577875_coinminer_glassworm_icedid_luca-stealer_njrat_stealc
- Size 6.8MB
- Sample260708-fkv8dsby9j
- SHA256 bf1b7acdd6bf4395933e3eb49de65a46d42fa95da1aefc69513fa7c244cf7b98
- MD5 1ce48265887c5632b6792f8f9e577875
- SHA1 c469fdc348ec674a927f44f5d5c843af800263ef
- SHA512 b03d6879ea1b68b85c93e8f19dc0ef3b2e6c5e512cda33e1d9f1a11e61f5533a9dade2bd1beffbabf88b3c8263ff4f6c42b2d197b0f43ba56fca3316eac9c267
- SSDEEP 98304:K+JiKnZBMALEtX8Tt8GVAK+ee8myrqagP1DGgI1OXjdKLdVNBl:KuiKXDERUtNt+LP/K/LdV5
- TLSH T17F76E056B7B400E4DC76C278ED968637FAB9743513A46ADF12B4C6A71B23AF0563E300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_1ce48265887c5632b6792f8f9e577875_coinminer_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_1ce48265887c5632b6792f8f9e577875_coinminer_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260706-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_1ce48265887c5632b6792f8f9e577875_coinminer_glassworm_icedid_luca-stealer_njrat_stealc
- Size 6.8MB
- SHA256 bf1b7acdd6bf4395933e3eb49de65a46d42fa95da1aefc69513fa7c244cf7b98
- MD5 1ce48265887c5632b6792f8f9e577875
- SHA1 c469fdc348ec674a927f44f5d5c843af800263ef
- SHA512 b03d6879ea1b68b85c93e8f19dc0ef3b2e6c5e512cda33e1d9f1a11e61f5533a9dade2bd1beffbabf88b3c8263ff4f6c42b2d197b0f43ba56fca3316eac9c267
- SSDEEP 98304:K+JiKnZBMALEtX8Tt8GVAK+ee8myrqagP1DGgI1OXjdKLdVNBl:KuiKXDERUtNt+LP/K/LdV5
- TLSH T17F76E056B7B400E4DC76C278ED968637FAB9743513A46ADF12B4C6A71B23AF0563E300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Indicator Removal: Clear Windows Event Logs
Clear Windows Event Logs to hide the activity of an intrusion.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext