General
- Target 2026-08-01_37b8cf2c5dc18b7c139c8b16fdddf3f0_coinminer_glassworm_icedid_njrat_stealc
- Size 18.8MB
- Sample260801-1jxeaaxepd
- SHA256 319daf4ceca1ee8b827a8f1efc86eb384db31c646e559e998fe3658561cceae4
- MD5 37b8cf2c5dc18b7c139c8b16fdddf3f0
- SHA1 e5a6c5960d82b07873d43713f6650c9bc1508c06
- SHA512 81402d4547fef915f4a27db9baa7ec1ee9c8a209b4ee8cada3a07248fdbc9386b556d79c43533097424bb1b8243cc95d16e82c192ff82d20d03bf5bd5f27a8e6
- SSDEEP 393216:Ug1H95KVNF30onJQfFyOh1YUIeFHI1wqYLHuG0AsBLE:Ug1GqzH8hFB
- TLSH T1E617BF5565B591A8D6ABC078C3969B16EB21746403242FFB20B8DAF02F73FE01E3D761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-01_37b8cf2c5dc18b7c139c8b16fdddf3f0_coinminer_glassworm_icedid_njrat_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_37b8cf2c5dc18b7c139c8b16fdddf3f0_coinminer_glassworm_icedid_njrat_stealc.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_37b8cf2c5dc18b7c139c8b16fdddf3f0_coinminer_glassworm_icedid_njrat_stealc
- Size 18.8MB
- SHA256 319daf4ceca1ee8b827a8f1efc86eb384db31c646e559e998fe3658561cceae4
- MD5 37b8cf2c5dc18b7c139c8b16fdddf3f0
- SHA1 e5a6c5960d82b07873d43713f6650c9bc1508c06
- SHA512 81402d4547fef915f4a27db9baa7ec1ee9c8a209b4ee8cada3a07248fdbc9386b556d79c43533097424bb1b8243cc95d16e82c192ff82d20d03bf5bd5f27a8e6
- SSDEEP 393216:Ug1H95KVNF30onJQfFyOh1YUIeFHI1wqYLHuG0AsBLE:Ug1GqzH8hFB
- TLSH T1E617BF5565B591A8D6ABC078C3969B16EB21746403242FFB20B8DAF02F73FE01E3D761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with VMProtect.
-
Loads dropped DLL
-
Suspicious use of NtSetInformationThreadHideFromDebugger