General
- Target 2026-07-18_0ec95949f0793f279402a28b939c99b2_coinminer_glassworm_icedid_megazord_njrat_ryuk_stealc_zxxz
- Size 86.1MB
- Sample260718-kschgaev5p
- SHA256 4be9ae388db63f263560dfa7ad6157ca4daa5f8ce27b11990fcb29e1b85423ba
- MD5 0ec95949f0793f279402a28b939c99b2
- SHA1 d37380bd875abda37845909ead60278eef55ece3
- SHA512 e060ae45eadabf3aa42ae80a15987b17217b82bf7595155f18b1c97e52cbf668ab5114710cd79d531cbb4ebb082b14b9459c1aa1b7eda1413dda564b94cef5a3
- SSDEEP 786432:nAZqtFi3zQzwBs6vNtcZY5Dfw3pgPVlcmXW:nAZui3zQz2jOZKft
- TLSH T178187D03B3A705D5E8F7DA3196E65223A932BC066F3085DF324C17262F73AE05A76B51
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-18_0ec95949f0793f279402a28b939c99b2_coinminer_glassworm_icedid_megazord_njrat_ryuk_stealc_zxxz.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_0ec95949f0793f279402a28b939c99b2_coinminer_glassworm_icedid_megazord_njrat_ryuk_stealc_zxxz
- Size 86.1MB
- SHA256 4be9ae388db63f263560dfa7ad6157ca4daa5f8ce27b11990fcb29e1b85423ba
- MD5 0ec95949f0793f279402a28b939c99b2
- SHA1 d37380bd875abda37845909ead60278eef55ece3
- SHA512 e060ae45eadabf3aa42ae80a15987b17217b82bf7595155f18b1c97e52cbf668ab5114710cd79d531cbb4ebb082b14b9459c1aa1b7eda1413dda564b94cef5a3
- SSDEEP 786432:nAZqtFi3zQzwBs6vNtcZY5Dfw3pgPVlcmXW:nAZui3zQz2jOZKft
- TLSH T178187D03B3A705D5E8F7DA3196E65223A932BC066F3085DF324C17262F73AE05A76B51
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates processes with tasklist