General
- Target 2026-07-26_97e4a6441eedec688e73c17d11d2f593_coinminer_glassworm_icedid_megazord_njrat_ryuk_stealc_zxxz
- Size 86.1MB
- Sample260726-1n3rvsdr4y
- SHA256 87977f7b2efda172988fd84aa549bb566b8b7fa9d6563dc190e369db8a1ccdc1
- MD5 97e4a6441eedec688e73c17d11d2f593
- SHA1 b68979fd8eb4e694aa681395c3984a9736a6eb24
- SHA512 7195662f749291a254f661878a9b7b88b951fcde4675b3214b97dbbef555ab8c87cc5fd3f475b1649ddcf8e1bb7cd0f7e21ecd0dc0509af3d9f37d71ec309100
- SSDEEP 786432:DAZqtFi3zQzwBs6vNtcZY5Dfw3pgPVlcmXW:DAZui3zQz2jOZKft
- TLSH T1BC187D03B3A705D5E8F7DA3196E65223A932BC066F3085DF324C17262F73AE05A76B51
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-26_97e4a6441eedec688e73c17d11d2f593_coinminer_glassworm_icedid_megazord_njrat_ryuk_stealc_zxxz.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-26_97e4a6441eedec688e73c17d11d2f593_coinminer_glassworm_icedid_megazord_njrat_ryuk_stealc_zxxz
- Size 86.1MB
- SHA256 87977f7b2efda172988fd84aa549bb566b8b7fa9d6563dc190e369db8a1ccdc1
- MD5 97e4a6441eedec688e73c17d11d2f593
- SHA1 b68979fd8eb4e694aa681395c3984a9736a6eb24
- SHA512 7195662f749291a254f661878a9b7b88b951fcde4675b3214b97dbbef555ab8c87cc5fd3f475b1649ddcf8e1bb7cd0f7e21ecd0dc0509af3d9f37d71ec309100
- SSDEEP 786432:DAZqtFi3zQzwBs6vNtcZY5Dfw3pgPVlcmXW:DAZui3zQz2jOZKft
- TLSH T1BC187D03B3A705D5E8F7DA3196E65223A932BC066F3085DF324C17262F73AE05A76B51
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates processes with tasklist