General

  • Target
    2026-07-12_4e50e5b43e953f39f8b793eeac201b11_coinminer_glassworm_icedid_megazord_njrat_ryuk_stealc_zxxz
  • Size 86.1MB
  • Sample260712-vq2dxsd16p
  • SHA256 e382d679e46401eae5d47634ddaa8c461b4aedd1084c583dc0846c9ae99e1ee2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Targets

    • Target
      2026-07-12_4e50e5b43e953f39f8b793eeac201b11_coinminer_glassworm_icedid_megazord_njrat_ryuk_stealc_zxxz
    • Size 86.1MB
    • SHA256 e382d679e46401eae5d47634ddaa8c461b4aedd1084c583dc0846c9ae99e1ee2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v16

Tasks