General
- Target 2026-07-09_bad4f66f1d7fc1b32ee0d976771c5d80_coinminer_glassworm_icedid_njrat_vidar_zxxz
- Size 32.4MB
- Sample260709-a1psnab12s
- SHA256 b53ec602aeae1bd4ccd5ad455b30442dd9968c75b3e796975d91fc5f89fd9bd4
- MD5 bad4f66f1d7fc1b32ee0d976771c5d80
- SHA1 bce7d347e7ec2a56b75581da0ebcf67542a7f4b4
- SHA512 d475b24ffb9edeec5ba8f6f6927d9341651f4d37fa175bf629b101693646435d845e9b4e5f374535b97b69afa32d35ee13d23af25c64d2ec37fb3e59a39947b5
- SSDEEP 393216:1m+sFHI7EzNFAUYl8XRQo/gCcT5NB35jmxEsYAwDcUWsNWcx9Q36g:1m+GCl3pNWc7o
- TLSH T1D2779D1372A50196E4B3D2388AA74213E773F8535731DBCF326D06152FBBAD09A7A760
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_bad4f66f1d7fc1b32ee0d976771c5d80_coinminer_glassworm_icedid_njrat_vidar_zxxz.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_bad4f66f1d7fc1b32ee0d976771c5d80_coinminer_glassworm_icedid_njrat_vidar_zxxz.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_bad4f66f1d7fc1b32ee0d976771c5d80_coinminer_glassworm_icedid_njrat_vidar_zxxz
- Size 32.4MB
- SHA256 b53ec602aeae1bd4ccd5ad455b30442dd9968c75b3e796975d91fc5f89fd9bd4
- MD5 bad4f66f1d7fc1b32ee0d976771c5d80
- SHA1 bce7d347e7ec2a56b75581da0ebcf67542a7f4b4
- SHA512 d475b24ffb9edeec5ba8f6f6927d9341651f4d37fa175bf629b101693646435d845e9b4e5f374535b97b69afa32d35ee13d23af25c64d2ec37fb3e59a39947b5
- SSDEEP 393216:1m+sFHI7EzNFAUYl8XRQo/gCcT5NB35jmxEsYAwDcUWsNWcx9Q36g:1m+GCl3pNWc7o
- TLSH T1D2779D1372A50196E4B3D2388AA74213E773F8535731DBCF326D06152FBBAD09A7A760
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates processes with tasklist