General
- Target 2026-07-10_804a81879bd75cb1d32be0c17907f42b_coinminer_glassworm_icedid_luca-stealer_njrat_stealc
- Size 6.8MB
- Sample260710-py1jpsbx5l
- SHA256 b01356b62b31a850fb3a9f3fdadac4556d9825edba30dbce671e1727657353b5
- MD5 804a81879bd75cb1d32be0c17907f42b
- SHA1 04d0c553215e731f66fae9833331c9f357c3cdd1
- SHA512 c366a95be287786a443eea2fb8acb90cf89d9da9256e926f1af66658eae184f3f28d6753796709f821329b271adc95730c4e0b8605319c2e6cb98bc6d18e4688
- SSDEEP 98304:K+JiKnZBMALEtX8Tt8GVAK+ee8myPqagP1DGgI1OXjdKLdVNBl:KuiKXDERUtNt+bP/K/LdV5
- TLSH T11676E056B7B400E4DC76C278ED968637FAB9743513A46ADF12B4C6A71B23AF0563E300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_804a81879bd75cb1d32be0c17907f42b_coinminer_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_804a81879bd75cb1d32be0c17907f42b_coinminer_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_804a81879bd75cb1d32be0c17907f42b_coinminer_glassworm_icedid_luca-stealer_njrat_stealc
- Size 6.8MB
- SHA256 b01356b62b31a850fb3a9f3fdadac4556d9825edba30dbce671e1727657353b5
- MD5 804a81879bd75cb1d32be0c17907f42b
- SHA1 04d0c553215e731f66fae9833331c9f357c3cdd1
- SHA512 c366a95be287786a443eea2fb8acb90cf89d9da9256e926f1af66658eae184f3f28d6753796709f821329b271adc95730c4e0b8605319c2e6cb98bc6d18e4688
- SSDEEP 98304:K+JiKnZBMALEtX8Tt8GVAK+ee8myPqagP1DGgI1OXjdKLdVNBl:KuiKXDERUtNt+bP/K/LdV5
- TLSH T11676E056B7B400E4DC76C278ED968637FAB9743513A46ADF12B4C6A71B23AF0563E300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Indicator Removal: Clear Windows Event Logs
Clear Windows Event Logs to hide the activity of an intrusion.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext