2026-08-03_a9eee5fcfb25c39a40b4dcd3bb5ef3e8_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-03_a9eee5fcfb25c39a40b4dcd3bb5ef3e8_coinminer_glassworm_icedid_luca-stealer_njrat_stealc
Size 7.6MB
Sample260804-mcwbrahd96
SHA256 910e823501176b82b60e73a1d51bd44fc4dd7b01994ecebcfd5bf9bc1eb52e58
MD5 a9eee5fcfb25c39a40b4dcd3bb5ef3e8
SHA1 012f473c5090a01fbcf38fe32bfb89b7762a0811
SHA512 94c449548c663952af4cf2e4bd0ab3558e1c97de0789f6007bef65dabd82cfad08ac49ad5afb926e0f5a18d5c172d999ce586496ceaa54a4ea8589413b248b75
SSDEEP 196608:WoQR4bE5mJ/qhxvbI3vdH5fHIhr0ttdzYB:Q4bE5mJ/qhxvcvdH5fohrS0
TLSH
T1C1869E5AB6B80156F46BE578C292A21FD2F1785517B053CF1AA0CAED0F63FE01A7B740
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_a9eee5fcfb25c39a40b4dcd3bb5ef3e8_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

File Explorer

2026-08-03_a9eee5fcfb25c39a40b4dcd3bb5ef3e8_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

.exe 7.6MB

2026-08-03_a9eee5fcfb25c39a40b4dcd3bb5ef3e8_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

IMPHASH d397b835798e5cb6b514e0b7685e91c3
SHA256 910e823501176b82b60e73a1d51bd44fc4dd7b01994ecebcfd5bf9bc1eb52e58
MD5 a9eee5fcfb25c39a40b4dcd3bb5ef3e8
SHA1 012f473c5090a01fbcf38fe32bfb89b7762a0811
SHA512 94c449548c663952af4cf2e4bd0ab3558e1c97de0789f6007bef65dabd82cfad08ac49ad5afb926e0f5a18d5c172d999ce586496ceaa54a4ea8589413b248b75
SSDEEP 196608:WoQR4bE5mJ/qhxvbI3vdH5fHIhr0ttdzYB:Q4bE5mJ/qhxvcvdH5fohrS0
TLSH
T1C1869E5AB6B80156F46BE578C292A21FD2F1785517B053CF1AA0CAED0F63FE01A7B740
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3979444

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\lynxx\Desktop\bylynxx_loader\bylynxx_loader\bylynxx_loader\ImGui\bylynxx_loader\Release\bylynxx_loader.pdb

crypt32

CertFreeCertificateChain CertGetCertificateChain CertDuplicateCertificateContext CertGetCertificateContextProperty CertFreeCertificateChainEngine CertOpenStore CertCreateCertificateChainEngine CryptQueryObject CertGetNameStringW CertFindExtension CertFreeCTLContext CertAddCertificateContextToStore CertFreeCRLContext CryptDecodeObjectEx PFXImportCertStore CryptStringToBinaryW CertFreeCertificateContext CertFindCertificateInStore CertEnumCertificatesInStore CertCloseStore CertOpenSystemStoreW

ws2_32

WSASetLastError getsockopt send WSACloseEvent WSACreateEvent WSAEnumNetworkEvents WSAEventSelect WSAResetEvent WSAWaitForMultipleEvents WSAGetLastError closesocket shutdown getservbyname getservbyport gethostbyaddr inet_ntoa inet_addr gethostbyname gethostname ioctlsocket sendto recvfrom freeaddrinfo getaddrinfo listen htonl select __WSAFDIsSet htons WSAIoctl setsockopt recv getsockname getpeername connect bind accept WSACleanup WSAStartup ntohs socket

iphlpapi

if_nametoindex

secur32

InitSecurityInterfaceW

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_47

D3DCompile

kernel32

SetFilePointerEx GetConsoleOutputCP FileTimeToSystemTime SetConsoleCtrlHandler GetDriveTypeW ExitProcess WriteConsoleW ExitThread SystemTimeToTzSpecificLocalTime GetModuleFileNameW InitializeCriticalSectionAndSpinCount FreeLibraryAndExitThread GetCommandLineA MultiByteToWideChar GlobalAlloc GlobalFree GlobalLock WideCharToMultiByte GlobalUnlock GetModuleHandleA LoadLibraryA QueryPerformanceFrequency GetProcAddress VerSetConditionMask FreeLibrary QueryPerformanceCounter SizeofResource GetTempPathW LockResource LoadLibraryW LoadResource FindResourceW GetConsoleWindow GetTickCount LoadLibraryExW GetComputerNameA ReleaseSRWLockExclusive AcquireSRWLockExclusive GetLastError SetLastError EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection FormatMessageA SleepEx Sleep CloseHandle WaitForSingleObjectEx CreateThread CreateFileW GetFullPathNameW MoveFileExW GetEnvironmentVariableA GetModuleHandleW GetStdHandle GetFileType ReadFile PeekNamedPipe WaitForMultipleObjects VerifyVersionInfoW GetFileSizeEx LocalFree WriteFile InitializeSRWLock ReleaseSRWLockShared GetCommandLineW GetCurrentThreadId TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemDirectoryA GetModuleHandleExW GetCurrentProcessId GetSystemTimeAsFileTime RtlVirtualUnwind VirtualProtect VirtualFree GetEnvironmentVariableW GetACP InitializeCriticalSection ReleaseSemaphore WaitForSingleObject GetExitCodeThread CreateSemaphoreA GetSystemTime SystemTimeToFileTime FindClose FindFirstFileW FindNextFileW GetConsoleMode SetConsoleMode ReadConsoleA ReadConsoleW RaiseException RtlPcToFileHeader RtlUnwindEx InitializeSListHead GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlLookupFunctionEntry RtlCaptureContext SleepConditionVariableSRW WakeAllConditionVariable GetCPInfo GetStringTypeW RtlUnwind LCMapStringEx DecodePointer EncodePointer GetFileInformationByHandleEx AreFileApisANSI GetFileInformationByHandle GetFileAttributesExW HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers OutputDebugStringW HeapReAlloc GetTimeZoneInformation DeleteFileW SetStdHandle SetEndOfFile IsValidCodePage GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW FindFirstFileExW GetCurrentDirectoryW GetLocaleInfoEx SetEnvironmentVariableW GetProcessHeap HeapSize AcquireSRWLockShared

user32

CloseClipboard GetClipboardData GetCursorPos SetClipboardData OpenClipboard EmptyClipboard SetCursorPos MessageBoxW GetUserObjectInformationW GetProcessWindowStation GetWindowLongW GetWindowThreadProcessId DefWindowProcW GetWindowRect DestroyWindow SetWindowRgn CreateWindowExW GetSystemMetrics UnregisterClassW RegisterClassExW ShowWindow DispatchMessageW SetWindowLongA PeekMessageW MoveWindow SetLayeredWindowAttributes TranslateMessage LoadIconW FindWindowW PostQuitMessage UpdateWindow ScreenToClient GetCapture ClientToScreen TrackMouseEvent GetForegroundWindow LoadCursorW SetCapture SetCursor GetClientRect IsWindowUnicode ReleaseCapture GetKeyState

gdi32

CreateRoundRectRgn

advapi32

CryptSignHashW CryptHashData CryptDestroyHash CryptDestroyKey CryptImportKey CryptEncrypt DeregisterEventSource RegisterEventSourceW ReportEventW CryptGenRandom CryptSetHashParam CryptGetProvParam CryptGetUserKey CryptExportKey CryptDecrypt CryptEnumProvidersW CryptGetHashParam CryptReleaseContext CryptAcquireContextW GetUserNameA CryptCreateHash

shell32

ShellExecuteA

ole32

CoInitializeEx CoInitializeSecurity CoUninitialize CoSetProxyBlanket CoCreateInstance

oleaut32

SysFreeString SysAllocString VariantClear

imm32

ImmSetCandidateWindow ImmReleaseContext ImmGetContext ImmSetCompositionWindow

dwmapi

DwmExtendFrameIntoClientArea

dbghelp

ImageDirectoryEntryToData

bcrypt

BCryptGenRandom

Name

.text

Size

4.0MB

Virtual Size

4.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

1.6MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

172KB

Virtual Size

172KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

331KB

Virtual Size

332KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

54KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_a9eee5fcfb25c39a40b4dcd3bb5ef3e8_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

crypt32

ws2_32

iphlpapi

secur32

d3d11

d3dcompiler_47

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

imm32

dwmapi

dbghelp

bcrypt

generic