General
- Target 2026-07-08_f422daf1238992bcd66a79b72fc4a3ce_coinminer_glassworm_icedid_luca-stealer_njrat_stealc
- Size 6.8MB
- Sample260708-tynmcsdw7s
- SHA256 2de94046227dfd6d83b7a4a22226780fd597a47491272bd89e8010df8c615776
- MD5 f422daf1238992bcd66a79b72fc4a3ce
- SHA1 2208118a4f9650e3a06b5e0ebe5a7256673e70f4
- SHA512 8524c21cc1d3bfdd156c43592303544e7d3e8c838a72a6a535f488fbba5f1d279edb355caade04e7fe97626545a962fd44f7532f194b893db4e7f97f201c0f7f
- SSDEEP 98304:K+JiKnZBMALEtX8Tt8GVAK+ee8myCqagP1DGgI1OXjdKLdVNBl:KuiKXDERUtNt+4P/K/LdV5
- TLSH T14176E056B7B400E4DC76C278ED968637FAB9743513A46ADF12B4C6A71B23AF0563E300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_f422daf1238992bcd66a79b72fc4a3ce_coinminer_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_f422daf1238992bcd66a79b72fc4a3ce_coinminer_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260706-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_f422daf1238992bcd66a79b72fc4a3ce_coinminer_glassworm_icedid_luca-stealer_njrat_stealc
- Size 6.8MB
- SHA256 2de94046227dfd6d83b7a4a22226780fd597a47491272bd89e8010df8c615776
- MD5 f422daf1238992bcd66a79b72fc4a3ce
- SHA1 2208118a4f9650e3a06b5e0ebe5a7256673e70f4
- SHA512 8524c21cc1d3bfdd156c43592303544e7d3e8c838a72a6a535f488fbba5f1d279edb355caade04e7fe97626545a962fd44f7532f194b893db4e7f97f201c0f7f
- SSDEEP 98304:K+JiKnZBMALEtX8Tt8GVAK+ee8myCqagP1DGgI1OXjdKLdVNBl:KuiKXDERUtNt+4P/K/LdV5
- TLSH T14176E056B7B400E4DC76C278ED968637FAB9743513A46ADF12B4C6A71B23AF0563E300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Indicator Removal: Clear Windows Event Logs
Clear Windows Event Logs to hide the activity of an intrusion.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext