General
- Target 2026-07-22_b6ecdcce6d14c7a30a0f144093f1b356_coinminer_dcrat_elex_glassworm_icedid_njrat_stealc
- Size 27.4MB
- Sample260722-vqaafazbnc
- SHA256 eb0a8cfb9f8ddd2251f40dee8d69e1a971a885c4d396c797ef4375d6d7e204ca
- MD5 b6ecdcce6d14c7a30a0f144093f1b356
- SHA1 3f5113864eb5717a8a71e1cb87c75125a920ef93
- SHA512 5f3ec7645678779a898e244dc1080b35826d36a4a637334bb84d571ee3959209e130bee7a37e12d113b6eeab7e5cde20c0aaa11c86d2cccfe8046c33f2f6755f
- SSDEEP 393216:NqRptO2uyOuNvy7H4nZBIVK65EVKKCGF35DhDLu+rwuedNe5PZkztkHXT:NYtPza05NuPMWsXT
- TLSH T19C57D05966B5919CD25BC078D3535B12EB2270A403606FFB11B9CAB02FA3FE01E7D762
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-22_b6ecdcce6d14c7a30a0f144093f1b356_coinminer_dcrat_elex_glassworm_icedid_njrat_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_b6ecdcce6d14c7a30a0f144093f1b356_coinminer_dcrat_elex_glassworm_icedid_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_b6ecdcce6d14c7a30a0f144093f1b356_coinminer_dcrat_elex_glassworm_icedid_njrat_stealc
- Size 27.4MB
- SHA256 eb0a8cfb9f8ddd2251f40dee8d69e1a971a885c4d396c797ef4375d6d7e204ca
- MD5 b6ecdcce6d14c7a30a0f144093f1b356
- SHA1 3f5113864eb5717a8a71e1cb87c75125a920ef93
- SHA512 5f3ec7645678779a898e244dc1080b35826d36a4a637334bb84d571ee3959209e130bee7a37e12d113b6eeab7e5cde20c0aaa11c86d2cccfe8046c33f2f6755f
- SSDEEP 393216:NqRptO2uyOuNvy7H4nZBIVK65EVKKCGF35DhDLu+rwuedNe5PZkztkHXT:NYtPza05NuPMWsXT
- TLSH T19C57D05966B5919CD25BC078D3535B12EB2270A403606FFB11B9CAB02FA3FE01E7D762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with unregistered version of .NET Reactor
-
Loads dropped DLL