General
- Target 2026-07-10_38dfa2a38a3c4bdd25be71d3d68b04e8_coinminer_glassworm_icedid_luca-stealer_njrat_stealc
- Size 6.8MB
- Sample260710-n3e8wsb14z
- SHA256 243e7c76832bea13f9a99ca534b037e98caea736600b2d8cbc159bf89058adec
- MD5 38dfa2a38a3c4bdd25be71d3d68b04e8
- SHA1 1563fc23ccc557b78b115cdd5d9a2f88f1f5dcc2
- SHA512 5e7b260dc027224c4f66b0e84024fac90be4dcb2c931e25c58bc725592a3d41ccffde5c8c0bcc82a58ed5045a4c612a01619fd5449cac895cfdf9e6abe8cc359
- SSDEEP 98304:K+JiKnZBMALEtX8Tt8GVAK+ee8myVqagP1DGgI1OXjdKLdVNBl:KuiKXDERUtNt+1P/K/LdV5
- TLSH T19E76E056B7B400E4DC76C278ED968637FAB9743513A46ADF12B4C6A71B23AF0563E300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_38dfa2a38a3c4bdd25be71d3d68b04e8_coinminer_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_38dfa2a38a3c4bdd25be71d3d68b04e8_coinminer_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_38dfa2a38a3c4bdd25be71d3d68b04e8_coinminer_glassworm_icedid_luca-stealer_njrat_stealc
- Size 6.8MB
- SHA256 243e7c76832bea13f9a99ca534b037e98caea736600b2d8cbc159bf89058adec
- MD5 38dfa2a38a3c4bdd25be71d3d68b04e8
- SHA1 1563fc23ccc557b78b115cdd5d9a2f88f1f5dcc2
- SHA512 5e7b260dc027224c4f66b0e84024fac90be4dcb2c931e25c58bc725592a3d41ccffde5c8c0bcc82a58ed5045a4c612a01619fd5449cac895cfdf9e6abe8cc359
- SSDEEP 98304:K+JiKnZBMALEtX8Tt8GVAK+ee8myVqagP1DGgI1OXjdKLdVNBl:KuiKXDERUtNt+1P/K/LdV5
- TLSH T19E76E056B7B400E4DC76C278ED968637FAB9743513A46ADF12B4C6A71B23AF0563E300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Indicator Removal: Clear Windows Event Logs
Clear Windows Event Logs to hide the activity of an intrusion.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext