General
- Target 2026-07-10_779b34d1923881637c896a704c2a5f72_coinminer_glassworm_hijackloader_icedid_njrat
- Size 14.9MB
- Sample260710-db99vact6q
- SHA256 70fb651e88a9b0ada69e50d15de657e2ae832b26f2da28e3c5ab160ea5c78330
- MD5 779b34d1923881637c896a704c2a5f72
- SHA1 23dd7de0b8167867a27c13d0310181dc886d2f12
- SHA512 0715f35717368363d4e61a33b407850714c56fee895cc0d3309f3376efd3a8172e6a71bd54c6fbfb33c149446e784a2f31392f61e9a576d1a18d827c89066ef9
- SSDEEP 196608:UGEHqprCcZ7HLFGZjjAi1avF7aqjHZh5d0LYBg4koGu9AKvw0n0uK:UGEvArFGZjjAieVnbMokoGZKvsuK
- TLSH T142F68B156BFA8884F6F27B74ADB982A44B76BC66AC71C31F2551120E4E72E40CD71B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_779b34d1923881637c896a704c2a5f72_coinminer_glassworm_hijackloader_icedid_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_779b34d1923881637c896a704c2a5f72_coinminer_glassworm_hijackloader_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_779b34d1923881637c896a704c2a5f72_coinminer_glassworm_hijackloader_icedid_njrat
- Size 14.9MB
- SHA256 70fb651e88a9b0ada69e50d15de657e2ae832b26f2da28e3c5ab160ea5c78330
- MD5 779b34d1923881637c896a704c2a5f72
- SHA1 23dd7de0b8167867a27c13d0310181dc886d2f12
- SHA512 0715f35717368363d4e61a33b407850714c56fee895cc0d3309f3376efd3a8172e6a71bd54c6fbfb33c149446e784a2f31392f61e9a576d1a18d827c89066ef9
- SSDEEP 196608:UGEHqprCcZ7HLFGZjjAi1avF7aqjHZh5d0LYBg4koGu9AKvw0n0uK:UGEvArFGZjjAieVnbMokoGZKvsuK
- TLSH T142F68B156BFA8884F6F27B74ADB982A44B76BC66AC71C31F2551120E4E72E40CD71B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with VMProtect.
-
Suspicious use of NtSetInformationThreadHideFromDebugger