General
- Target 2026-07-12_f9f21066f4336f44de027c065c505e6a_coinminer_glassworm_icedid_megazord_njrat_ryuk_stealc_zxxz
- Size 86.1MB
- Sample260712-s5sdfsct7n
- SHA256 78c15b860f11533d6e0d5d43049e084ba315d51c3eb2be58a9a7599b759fe41f
- MD5 f9f21066f4336f44de027c065c505e6a
- SHA1 079e0caa9d696112580e00f8bb1e3e1ee0a91ed8
- SHA512 125d02de3526c381f2deb684848668e7a01c58772c681e02fc69d03773c5c2d907489de7493d76a7ea99c19129a1941469d4abf6188d5f5b90360d219585b41f
- SSDEEP 786432:BAZqtFi3zQzwBs6vNtcZY5Dfw3pgPVlcmXW:BAZui3zQz2jOZKft
- TLSH T19E187D03B3A705D5E8F7DA3196E65223A932BC066F3085DF324C17262F73AE05A76B51
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-12_f9f21066f4336f44de027c065c505e6a_coinminer_glassworm_icedid_megazord_njrat_ryuk_stealc_zxxz.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_f9f21066f4336f44de027c065c505e6a_coinminer_glassworm_icedid_megazord_njrat_ryuk_stealc_zxxz
- Size 86.1MB
- SHA256 78c15b860f11533d6e0d5d43049e084ba315d51c3eb2be58a9a7599b759fe41f
- MD5 f9f21066f4336f44de027c065c505e6a
- SHA1 079e0caa9d696112580e00f8bb1e3e1ee0a91ed8
- SHA512 125d02de3526c381f2deb684848668e7a01c58772c681e02fc69d03773c5c2d907489de7493d76a7ea99c19129a1941469d4abf6188d5f5b90360d219585b41f
- SSDEEP 786432:BAZqtFi3zQzwBs6vNtcZY5Dfw3pgPVlcmXW:BAZui3zQz2jOZKft
- TLSH T19E187D03B3A705D5E8F7DA3196E65223A932BC066F3085DF324C17262F73AE05A76B51
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates processes with tasklist