General
- Target 2026-07-22_96b57a0721370b589b5f8f18aacc5bde_coinminer_glassworm_icedid_megazord_njrat_ryuk_stealc_zxxz
- Size 86.1MB
- Sample260722-146tfscg64
- SHA256 a298717399be81330ef0a885de4a43497a916fe1774361ab138a447c84f7a273
- MD5 96b57a0721370b589b5f8f18aacc5bde
- SHA1 0d11e6b554ee9775c853922b6024317c4c6c7d7e
- SHA512 57720886520a43e3747023d3d36dc1b4f68b42faff128bc802548b4c4c0cdde565ad7ec17f23ceb86ea138ae4f58119ab0918cfbb08c09cf2a39d906045699be
- SSDEEP 786432:CAZqtFi3zQzwBs6vNtcZY5Dfw3pgPVlcmXW:CAZui3zQz2jOZKft
- TLSH T1B4187D03B3A705D5E8F7DA3196E65223A932BC066F3085DF324C17262F73AE05A76B51
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-22_96b57a0721370b589b5f8f18aacc5bde_coinminer_glassworm_icedid_megazord_njrat_ryuk_stealc_zxxz.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_96b57a0721370b589b5f8f18aacc5bde_coinminer_glassworm_icedid_megazord_njrat_ryuk_stealc_zxxz
- Size 86.1MB
- SHA256 a298717399be81330ef0a885de4a43497a916fe1774361ab138a447c84f7a273
- MD5 96b57a0721370b589b5f8f18aacc5bde
- SHA1 0d11e6b554ee9775c853922b6024317c4c6c7d7e
- SHA512 57720886520a43e3747023d3d36dc1b4f68b42faff128bc802548b4c4c0cdde565ad7ec17f23ceb86ea138ae4f58119ab0918cfbb08c09cf2a39d906045699be
- SSDEEP 786432:CAZqtFi3zQzwBs6vNtcZY5Dfw3pgPVlcmXW:CAZui3zQz2jOZKft
- TLSH T1B4187D03B3A705D5E8F7DA3196E65223A932BC066F3085DF324C17262F73AE05A76B51
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates processes with tasklist