General
- Target 2026-07-12_c2e3aab112a4244b1c8454c3c14530fd_coinminer_glassworm_icedid_megazord_njrat_ryuk_stealc_zxxz
- Size 87.9MB
- Sample260712-tmdysaey4y
- SHA256 5e0404541e32535c07834d04952eb2508442d2083a27c284455b9cb55fb81e9b
- MD5 c2e3aab112a4244b1c8454c3c14530fd
- SHA1 951a0d7fad853cd201258e4c0cba695f90e405ff
- SHA512 277d51b6e1672086179c738b5175b2502976ba2b668d9b60de8a7d4746e2aed6724598ab90978909d9e1cded7b1ea95801016bd813ce36ac696dd8923c66c8fd
- SSDEEP 786432:tpNzhI+nsVt6mHaIvAN6v+s4pgPVlcmg:tDNI+nsPcN6v+A
- TLSH T101187D13B3A704D5E8F7DA7496E65223A932BC062F3085DF324C47261F73AE05A76B61
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-12_c2e3aab112a4244b1c8454c3c14530fd_coinminer_glassworm_icedid_megazord_njrat_ryuk_stealc_zxxz.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_c2e3aab112a4244b1c8454c3c14530fd_coinminer_glassworm_icedid_megazord_njrat_ryuk_stealc_zxxz
- Size 87.9MB
- SHA256 5e0404541e32535c07834d04952eb2508442d2083a27c284455b9cb55fb81e9b
- MD5 c2e3aab112a4244b1c8454c3c14530fd
- SHA1 951a0d7fad853cd201258e4c0cba695f90e405ff
- SHA512 277d51b6e1672086179c738b5175b2502976ba2b668d9b60de8a7d4746e2aed6724598ab90978909d9e1cded7b1ea95801016bd813ce36ac696dd8923c66c8fd
- SSDEEP 786432:tpNzhI+nsVt6mHaIvAN6v+s4pgPVlcmg:tDNI+nsPcN6v+A
- TLSH T101187D13B3A704D5E8F7DA7496E65223A932BC062F3085DF324C47261F73AE05A76B61
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates processes with tasklist