General

  • Target
    2026-07-18_08093fa477759a2a6e3b8e0fae56bd1c_coinminer_glassworm_icedid_megazord_njrat_ryuk_stealc_zxxz
  • Size 86.1MB
  • Sample260718-n6b1msax7r
  • SHA256 b3b5994a0ab1341f5ff52e2d855a8506851a7d9cb82fc9ba8fb0186c4a752ce9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Targets

    • Target
      2026-07-18_08093fa477759a2a6e3b8e0fae56bd1c_coinminer_glassworm_icedid_megazord_njrat_ryuk_stealc_zxxz
    • Size 86.1MB
    • SHA256 b3b5994a0ab1341f5ff52e2d855a8506851a7d9cb82fc9ba8fb0186c4a752ce9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v16

Tasks