General
- Target 2026-08-02_a451d43918b52e2a91a7fb2350764a41_amadey_coinminer_glassworm_icedid_luca-stealer_njrat_stealc
- Size 34.8MB
- Sample260802-vx3wbstwhx
- SHA256 3fd5feffd05858617af4948a88a1c57d4f5173be4a3b65a4c7a659c231dd4aaf
- MD5 a451d43918b52e2a91a7fb2350764a41
- SHA1 5e27294b94ed0a86afec955b68da6cd92720e1f6
- SHA512 a3712d1520fd4a90364be5504531609c12719e947dce93c81a98288dcf15c141e3e9010577c9cd5e7cd20ac2b82942a235d92b563f982e457dc72dd3f087c673
- SSDEEP 786432:42Gl3TKHnpLLrPLyZ0QwhUxoVccmSQofxMJKzZIckJo3ygsMtpj3y3cJZJZ+O+Om:LsTKHnhHPLU0nhUxoVccmSQofxAD
- TLSH T11C877E49E29484E2E8759175CB0599A5EAA37D92871092CF362D3F0F6FF2EC44D3BE40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_a451d43918b52e2a91a7fb2350764a41_amadey_coinminer_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_a451d43918b52e2a91a7fb2350764a41_amadey_coinminer_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_a451d43918b52e2a91a7fb2350764a41_amadey_coinminer_glassworm_icedid_luca-stealer_njrat_stealc
- Size 34.8MB
- SHA256 3fd5feffd05858617af4948a88a1c57d4f5173be4a3b65a4c7a659c231dd4aaf
- MD5 a451d43918b52e2a91a7fb2350764a41
- SHA1 5e27294b94ed0a86afec955b68da6cd92720e1f6
- SHA512 a3712d1520fd4a90364be5504531609c12719e947dce93c81a98288dcf15c141e3e9010577c9cd5e7cd20ac2b82942a235d92b563f982e457dc72dd3f087c673
- SSDEEP 786432:42Gl3TKHnpLLrPLyZ0QwhUxoVccmSQofxMJKzZIckJo3ygsMtpj3y3cJZJZ+O+Om:LsTKHnhHPLU0nhUxoVccmSQofxAD
- TLSH T11C877E49E29484E2E8759175CB0599A5EAA37D92871092CF362D3F0F6FF2EC44D3BE40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL