General
- Target 2026-07-28_001be6f0e614226141df751c58cbc9fa_coinminer_glassworm_hijackloader_vidar
- Size 25.7MB
- Sample260729-ccfk7aep3y
- SHA256 c9df433ae254d5eec520d748ee186e401009848d541a24a26f037bb44848e60e
- MD5 001be6f0e614226141df751c58cbc9fa
- SHA1 0eadf5793d9d786dc11c2cda42a0afa1555b8544
- SHA512 4817a70853ebc7a76208a2f8a7fd33b1a4b30de1cbf9f97bf1d656228c213e3c3f9b878a40d19575a6aedb62d480297364d373ab096d171ba45f37721c17c437
- SSDEEP 393216:Oj1LDmGpwq8tK1r2q781CPwDvt3uFhCBFe9XbruTeCBdKERFOJT:Oj1bplyA
- TLSH T11947AD66B3A40057E8B6E03899974643D771FC026720C3CB6068B5AE2FB77E15F7A748
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-28_001be6f0e614226141df751c58cbc9fa_coinminer_glassworm_hijackloader_vidar.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_001be6f0e614226141df751c58cbc9fa_coinminer_glassworm_hijackloader_vidar.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_001be6f0e614226141df751c58cbc9fa_coinminer_glassworm_hijackloader_vidar
- Size 25.7MB
- SHA256 c9df433ae254d5eec520d748ee186e401009848d541a24a26f037bb44848e60e
- MD5 001be6f0e614226141df751c58cbc9fa
- SHA1 0eadf5793d9d786dc11c2cda42a0afa1555b8544
- SHA512 4817a70853ebc7a76208a2f8a7fd33b1a4b30de1cbf9f97bf1d656228c213e3c3f9b878a40d19575a6aedb62d480297364d373ab096d171ba45f37721c17c437
- SSDEEP 393216:Oj1LDmGpwq8tK1r2q781CPwDvt3uFhCBFe9XbruTeCBdKERFOJT:Oj1bplyA
- TLSH T11947AD66B3A40057E8B6E03899974643D771FC026720C3CB6068B5AE2FB77E15F7A748
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Loads dropped DLL