General
- Target 2026-07-18_08093fa477759a2a6e3b8e0fae56bd1c_coinminer_glassworm_icedid_megazord_njrat_ryuk_stealc_zxxz
- Size 86.1MB
- Sample260718-n6b1msax7r
- SHA256 b3b5994a0ab1341f5ff52e2d855a8506851a7d9cb82fc9ba8fb0186c4a752ce9
- MD5 08093fa477759a2a6e3b8e0fae56bd1c
- SHA1 b6d629403284a172384592354bc3a14991c56303
- SHA512 ef9be5843cb7598ed9553feb37ff3695b447ff16dfe12810171e98798582739e29c485063f8734716b0381510cd8843f2c199de26e8ad9d44f458579c598849c
- SSDEEP 786432:QAZqtFi3zQzwBs6vNtcZY5Dfw3pgPVlcmXW:QAZui3zQz2jOZKft
- TLSH T1B0187D03B3A705D5E8F7DA3196E65223A932BC066F3085DF324C17262F73AE05A76B51
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-18_08093fa477759a2a6e3b8e0fae56bd1c_coinminer_glassworm_icedid_megazord_njrat_ryuk_stealc_zxxz.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_08093fa477759a2a6e3b8e0fae56bd1c_coinminer_glassworm_icedid_megazord_njrat_ryuk_stealc_zxxz
- Size 86.1MB
- SHA256 b3b5994a0ab1341f5ff52e2d855a8506851a7d9cb82fc9ba8fb0186c4a752ce9
- MD5 08093fa477759a2a6e3b8e0fae56bd1c
- SHA1 b6d629403284a172384592354bc3a14991c56303
- SHA512 ef9be5843cb7598ed9553feb37ff3695b447ff16dfe12810171e98798582739e29c485063f8734716b0381510cd8843f2c199de26e8ad9d44f458579c598849c
- SSDEEP 786432:QAZqtFi3zQzwBs6vNtcZY5Dfw3pgPVlcmXW:QAZui3zQz2jOZKft
- TLSH T1B0187D03B3A705D5E8F7DA3196E65223A932BC066F3085DF324C17262F73AE05A76B51
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates processes with tasklist