General
- Target 2026-07-08_12940122f110e0bac9897aacba57085d_coinminer_glassworm_icedid_luca-stealer_njrat_stealc
- Size 6.8MB
- Sample260708-fnhfpsbt5t
- SHA256 e65dd8789b61afb8034c11e0a474581f0fb35fb8bf1b561362ed0ad5980b033f
- MD5 12940122f110e0bac9897aacba57085d
- SHA1 57625dd44e6632dfb0803f3b1e96cd0e6a729a76
- SHA512 ccf379068b75613a26a1744b91243dc560bbf128804ed1163d6a81e4baf17161197d7b2848e2addd394d45e49b151ff089c702c5c2fc41563119a70b08a1bb53
- SSDEEP 98304:K+JiKnZBMALEtX8Tt8GVAK+ee8myLqagP1DGgI1OXjdKLdVNBl:KuiKXDERUtNt+7P/K/LdV5
- TLSH T1A476E056B7B400E4DC76C278ED968637FAB9743513A46ADF12B4C6A71B23AF0563E300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_12940122f110e0bac9897aacba57085d_coinminer_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_12940122f110e0bac9897aacba57085d_coinminer_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260706-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_12940122f110e0bac9897aacba57085d_coinminer_glassworm_icedid_luca-stealer_njrat_stealc
- Size 6.8MB
- SHA256 e65dd8789b61afb8034c11e0a474581f0fb35fb8bf1b561362ed0ad5980b033f
- MD5 12940122f110e0bac9897aacba57085d
- SHA1 57625dd44e6632dfb0803f3b1e96cd0e6a729a76
- SHA512 ccf379068b75613a26a1744b91243dc560bbf128804ed1163d6a81e4baf17161197d7b2848e2addd394d45e49b151ff089c702c5c2fc41563119a70b08a1bb53
- SSDEEP 98304:K+JiKnZBMALEtX8Tt8GVAK+ee8myLqagP1DGgI1OXjdKLdVNBl:KuiKXDERUtNt+7P/K/LdV5
- TLSH T1A476E056B7B400E4DC76C278ED968637FAB9743513A46ADF12B4C6A71B23AF0563E300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Indicator Removal: Clear Windows Event Logs
Clear Windows Event Logs to hide the activity of an intrusion.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext