General
- Target 2026-07-09_b1374c01519d6b35008121fdcf84f00c_coinminer_glassworm_icedid_njrat_vidar_zxxz
- Size 32.7MB
- Sample260709-cc247acv9w
- SHA256 5bb363bbf944ba0d6f5e0ad504a35ef650ce92967d26bc69ad547beba7c3f6f9
- MD5 b1374c01519d6b35008121fdcf84f00c
- SHA1 217b4167e3aa00e0860c734e3eeeaa265dd1cef0
- SHA512 9b354016785cdca3cb998d184d216006eb474e2861eb825521fee497aa8f1cfb599b5a6234c57bb861845b38316f3333b734d3cb22e963aa94a89fbaae310830
- SSDEEP 393216:Pm+sFHI7EzNFAUYl8XRQo/gCcT5NB35jmxEsYAwDlUWsNWcx9QWbn:Pm+GCl32NWc7
- TLSH T16E779E1372A50196E4B3D2388AA74213E773F8535731DBCF326D06152FBBAD09A7A760
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_b1374c01519d6b35008121fdcf84f00c_coinminer_glassworm_icedid_njrat_vidar_zxxz.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_b1374c01519d6b35008121fdcf84f00c_coinminer_glassworm_icedid_njrat_vidar_zxxz.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_b1374c01519d6b35008121fdcf84f00c_coinminer_glassworm_icedid_njrat_vidar_zxxz
- Size 32.7MB
- SHA256 5bb363bbf944ba0d6f5e0ad504a35ef650ce92967d26bc69ad547beba7c3f6f9
- MD5 b1374c01519d6b35008121fdcf84f00c
- SHA1 217b4167e3aa00e0860c734e3eeeaa265dd1cef0
- SHA512 9b354016785cdca3cb998d184d216006eb474e2861eb825521fee497aa8f1cfb599b5a6234c57bb861845b38316f3333b734d3cb22e963aa94a89fbaae310830
- SSDEEP 393216:Pm+sFHI7EzNFAUYl8XRQo/gCcT5NB35jmxEsYAwDlUWsNWcx9QWbn:Pm+GCl32NWc7
- TLSH T16E779E1372A50196E4B3D2388AA74213E773F8535731DBCF326D06152FBBAD09A7A760
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates processes with tasklist