General
- Target 2026-07-22_5b98cf7693a6cf6562d9f73d7c4daafc_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar
- Size 27.5MB
- Sample260722-3zfgtabj3v
- SHA256 a8cf3d4ce5a0153eaa43b130293d9d76837ab9d325707bef46e6244c62f449e2
- MD5 5b98cf7693a6cf6562d9f73d7c4daafc
- SHA1 6881ff256efcc2e98a9200a802333651f2ab6201
- SHA512 00414c69090f551a962d04c8fd19d6fb6bc36b829a68b69688636e3400ea125479eea1b4336a317e7b971f039e3b733e04ada1af05b6c514d171c64cb68859d0
- SSDEEP 393216:rx+y0ctY0+CO2uyOuNvy7H4nZBIVK65EVKKCGF35DhDuquCTz:ILFCPza05Naq3
- TLSH T1A457BE15A2B541A9D16BC138C3528733EB7178A403309AEF05A9E6B11F73EE05B7F762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-22_5b98cf7693a6cf6562d9f73d7c4daafc_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_5b98cf7693a6cf6562d9f73d7c4daafc_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_5b98cf7693a6cf6562d9f73d7c4daafc_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar
- Size 27.5MB
- SHA256 a8cf3d4ce5a0153eaa43b130293d9d76837ab9d325707bef46e6244c62f449e2
- MD5 5b98cf7693a6cf6562d9f73d7c4daafc
- SHA1 6881ff256efcc2e98a9200a802333651f2ab6201
- SHA512 00414c69090f551a962d04c8fd19d6fb6bc36b829a68b69688636e3400ea125479eea1b4336a317e7b971f039e3b733e04ada1af05b6c514d171c64cb68859d0
- SSDEEP 393216:rx+y0ctY0+CO2uyOuNvy7H4nZBIVK65EVKKCGF35DhDuquCTz:ILFCPza05Naq3
- TLSH T1A457BE15A2B541A9D16BC138C3528733EB7178A403309AEF05A9E6B11F73EE05B7F762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.