General
- Target 2026-07-09_9842da6fe254f4bfdde735b34a237c35_coinminer_glassworm_icedid_njrat_vidar_zxxz
- Size 35.0MB
- Sample260709-mgcefagw5m
- SHA256 54715cac8c5f15f18dfba550c2bd727aad10c3605ef706b1123baf3d9116f006
- MD5 9842da6fe254f4bfdde735b34a237c35
- SHA1 7318328073f4bf89849702b0d642700d82fbfb30
- SHA512 a9a233c6d253e79267c9929c117fc75501b897f4a2a893a7e6fc793d8e06fe521a8724436c8f4bcebcb1773c2a7124ed992739a235e520b9db10bcdf615bf03d
- SSDEEP 393216:dm+sFHI7EzNFAUYl8XRQo/gCcT5NB35jmxEsYAwDaUWsNWcx9Qr:dm+GCl3fNWc7Q
- TLSH T11A879E0372E60196E473D238CA974203E772F8175731DACF325C06692FBBAD49A7A764
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-09_9842da6fe254f4bfdde735b34a237c35_coinminer_glassworm_icedid_njrat_vidar_zxxz.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_9842da6fe254f4bfdde735b34a237c35_coinminer_glassworm_icedid_njrat_vidar_zxxz.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_9842da6fe254f4bfdde735b34a237c35_coinminer_glassworm_icedid_njrat_vidar_zxxz
- Size 35.0MB
- SHA256 54715cac8c5f15f18dfba550c2bd727aad10c3605ef706b1123baf3d9116f006
- MD5 9842da6fe254f4bfdde735b34a237c35
- SHA1 7318328073f4bf89849702b0d642700d82fbfb30
- SHA512 a9a233c6d253e79267c9929c117fc75501b897f4a2a893a7e6fc793d8e06fe521a8724436c8f4bcebcb1773c2a7124ed992739a235e520b9db10bcdf615bf03d
- SSDEEP 393216:dm+sFHI7EzNFAUYl8XRQo/gCcT5NB35jmxEsYAwDaUWsNWcx9Qr:dm+GCl3fNWc7Q
- TLSH T11A879E0372E60196E473D238CA974203E772F8175731DACF325C06692FBBAD49A7A764
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates processes with tasklist