General
- Target 2026-08-04_33c5de2db336e9981069de2553abb1b3_coinminer_glassworm_helldown_icedid_luca-stealer_njrat_stealc
- Size 2.6MB
- Sample260804-tpn7javara
- SHA256 17f4a3fdacc83fa3688ab9a896f8653a446e3b4b4ec1fdb68e722a9e1487f590
- MD5 33c5de2db336e9981069de2553abb1b3
- SHA1 f18b185265b864da792c4bd4c8f6cbd2b1fb3c59
- SHA512 d7761960047090b48e13d475158cb4f8ac9d50f98c1048f9e1e1d836566c177856875103ee700cdc8010f93b7e17fe2deb1b6199b1970ef6d491ea505ed5a0c0
- SSDEEP 49152:MO/fMVstC2RVovJKsKu7zxRiKxAv2e+XMhP54h:gW/RVeTKA/LxyJ5s
- TLSH T13AC58E2B63A800E9D0B6C278CE879A46F7737445037167EF16A487A65FA77E00E7E701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-04_33c5de2db336e9981069de2553abb1b3_coinminer_glassworm_helldown_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_33c5de2db336e9981069de2553abb1b3_coinminer_glassworm_helldown_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_33c5de2db336e9981069de2553abb1b3_coinminer_glassworm_helldown_icedid_luca-stealer_njrat_stealc
- Size 2.6MB
- SHA256 17f4a3fdacc83fa3688ab9a896f8653a446e3b4b4ec1fdb68e722a9e1487f590
- MD5 33c5de2db336e9981069de2553abb1b3
- SHA1 f18b185265b864da792c4bd4c8f6cbd2b1fb3c59
- SHA512 d7761960047090b48e13d475158cb4f8ac9d50f98c1048f9e1e1d836566c177856875103ee700cdc8010f93b7e17fe2deb1b6199b1970ef6d491ea505ed5a0c0
- SSDEEP 49152:MO/fMVstC2RVovJKsKu7zxRiKxAv2e+XMhP54h:gW/RVeTKA/LxyJ5s
- TLSH T13AC58E2B63A800E9D0B6C278CE879A46F7737445037167EF16A487A65FA77E00E7E701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Downloads MZ/PE file