General
- Target 2026-07-12_4e50e5b43e953f39f8b793eeac201b11_coinminer_glassworm_icedid_megazord_njrat_ryuk_stealc_zxxz
- Size 86.1MB
- Sample260712-vq2dxsd16p
- SHA256 e382d679e46401eae5d47634ddaa8c461b4aedd1084c583dc0846c9ae99e1ee2
- MD5 4e50e5b43e953f39f8b793eeac201b11
- SHA1 e9e325645ff07a6d3a1509f961fc82b7349c7250
- SHA512 371a9bafbf6062346c3faaf7b5ff27a73c663818461d898373f39aaf7f9e42b2b5ffa09c534b5dab06c3d632109b463c3a916684c610419861860be3ce2a4192
- SSDEEP 786432:mAZqtFi3zQzwBs6vNtcZY5Dfw3pgPVlcmXW:mAZui3zQz2jOZKft
- TLSH T19F187D03B3A705D5E8F7DA3196E65223A932BC066F3085DF324C17262F73AE05A76B51
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-12_4e50e5b43e953f39f8b793eeac201b11_coinminer_glassworm_icedid_megazord_njrat_ryuk_stealc_zxxz.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_4e50e5b43e953f39f8b793eeac201b11_coinminer_glassworm_icedid_megazord_njrat_ryuk_stealc_zxxz
- Size 86.1MB
- SHA256 e382d679e46401eae5d47634ddaa8c461b4aedd1084c583dc0846c9ae99e1ee2
- MD5 4e50e5b43e953f39f8b793eeac201b11
- SHA1 e9e325645ff07a6d3a1509f961fc82b7349c7250
- SHA512 371a9bafbf6062346c3faaf7b5ff27a73c663818461d898373f39aaf7f9e42b2b5ffa09c534b5dab06c3d632109b463c3a916684c610419861860be3ce2a4192
- SSDEEP 786432:mAZqtFi3zQzwBs6vNtcZY5Dfw3pgPVlcmXW:mAZui3zQz2jOZKft
- TLSH T19F187D03B3A705D5E8F7DA3196E65223A932BC066F3085DF324C17262F73AE05A76B51
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates processes with tasklist