General
- Target 2026-07-15_f652b99ad0ef04b6398d74141d1cecf1_coinminer_dosia_glassworm_hive_icedid_luca-stealer_njrat_poet-rat_quasar-rat_snatch_stealc_vidar
- Size 16.1MB
- Sample260715-grjcvafy2v
- SHA256 8363995cd5d0dfb539c00b565ab3019c9ce723bb07ecebbcb2d9c3d765227820
- MD5 f652b99ad0ef04b6398d74141d1cecf1
- SHA1 f3479b0e63603217e68bd523b82194478a654c54
- SHA512 9ce106d5972870c8854c7872985c21a05062bf6498c2469783cec45e2dd2ac942af6c3f573a2658e7619759488a669d0698ab611da0f6a875da2ca7f46a783cc
- SSDEEP 98304:cIH53uAylR8ZKa9cELr1qDaMxPzEUGR3JbeSpSjDig+bQEC:tpelRcLxqDjPzENbem0DaV
- TLSH T1E2075B17EC65F4A8C4AED1748963561F7BB07C450B2027D72B90F6282FB7BD09ABA350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-15_f652b99ad0ef04b6398d74141d1cecf1_coinminer_dosia_glassworm_hive_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_f652b99ad0ef04b6398d74141d1cecf1_coinminer_dosia_glassworm_hive_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_f652b99ad0ef04b6398d74141d1cecf1_coinminer_dosia_glassworm_hive_icedid_luca-stealer_njrat_poet-rat_quasar-rat_snatch_stealc_vidar
- Size 16.1MB
- SHA256 8363995cd5d0dfb539c00b565ab3019c9ce723bb07ecebbcb2d9c3d765227820
- MD5 f652b99ad0ef04b6398d74141d1cecf1
- SHA1 f3479b0e63603217e68bd523b82194478a654c54
- SHA512 9ce106d5972870c8854c7872985c21a05062bf6498c2469783cec45e2dd2ac942af6c3f573a2658e7619759488a669d0698ab611da0f6a875da2ca7f46a783cc
- SSDEEP 98304:cIH53uAylR8ZKa9cELr1qDaMxPzEUGR3JbeSpSjDig+bQEC:tpelRcLxqDjPzENbem0DaV
- TLSH T1E2075B17EC65F4A8C4AED1748963561F7BB07C450B2027D72B90F6282FB7BD09ABA350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
UPX dump on OEP (original entry point)