Analysis
- max time kernel
150s - max time network
149s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
19/07/2026, 08:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_312e1173ba2a7be9f6965e10ed123d49_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_xmrig.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_312e1173ba2a7be9f6965e10ed123d49_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_xmrig.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 2026-07-19_312e1173ba2a7be9f6965e10ed123d49_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_xmrig.exe
- Size 6.7MB
- Sample260719-ke1m5sav21
- SHA256 9bd0a277f6243fee07bcbd8e639dad66512ef99920ba73483239326ea253dbd7
- MD5 312e1173ba2a7be9f6965e10ed123d49
- SHA1 1fc8319cd6a4b1b25ca01e9a0fc682653e20248b
- SHA512 23bc382505dced2763584a916895442f87817a1dad2152e056e2ec09f51d0e83dbee6a1ad63ab02a31add5597669b102ba3e8b492d87c473d24868c205e70fba
- SSDEEP 98304:K319K98HR8ZBDx8fJf+jZIeDw3uu6hfkM++FFq4L:KFEaHRYDx8fJfGIeDw3uuqRZ7
- TLSH T1EF669DB9B6BC00E9D86AC1BCC6865227EB71B45517B067CF1A6487F60F23AD41E7E700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeLockMemoryPrivilege 916 2026-07-19_312e1173ba2a7be9f6965e10ed123d49_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_xmrig.exe Token: SeLockMemoryPrivilege 916 2026-07-19_312e1173ba2a7be9f6965e10ed123d49_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_xmrig.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 916 2026-07-19_312e1173ba2a7be9f6965e10ed123d49_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_xmrig.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-19_312e1173ba2a7be9f6965e10ed123d49_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_xmrig.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-19_312e1173ba2a7be9f6965e10ed123d49_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_xmrig.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:916