Overview

overview

10

Static

static

10

2026-07-10...at.exe

windows10-2004-x64

9

2026-07-10...at.exe

windows11-ltsc_2024-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-07-10_779b34d1923881637c896a704c2a5f72_coinminer_glassworm_hijackloader_icedid_njrat
  • Size 14.9MB
  • Sample260710-db99vact6q
  • SHA256 70fb651e88a9b0ada69e50d15de657e2ae832b26f2da28e3c5ab160ea5c78330
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Detects executables packed with VMProtect. 1 IoCs

File Explorer

  • 2026-07-10_779b34d1923881637c896a704c2a5f72_coinminer_glassworm_hijackloader_icedid_njrat
    .exe 14.9MB

2026-07-10_779b34d1923881637c896a704c2a5f72_coinminer_glassworm_hijackloader_icedid_njrat

  • IMPHASH 083c958f81293bc3cb5c789672e653a8
  • SHA256 70fb651e88a9b0ada69e50d15de657e2ae832b26f2da28e3c5ab160ea5c78330
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:6windowsx64arch:x64

  • Detects executables packed with VMProtect.

Digest
68:af:89:ac:ed:1d:c6:c4:62:a5:34:fa:e3:33:57:93:0f:29:b2:d9:05:dd:b7:a5:ed:98:d4:1c:0b:19:77:6d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Tally Solutions Pvt Ltd,O=Tally Solutions Pvt Ltd,L=Bengaluru,ST=Karnataka,C=IN
Minor OS version
1
Major OS version
6
Entry point
39563618
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths