General
- Target 2026-08-05_e0c73875f7fc9e36a3719e40b1b620f9_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar
- Size 27.3MB
- Sample260806-chal5abr9s
- SHA256 8a1a80bb7ae3fa5417147663852161266f8e525bb01d95cffcdafdcc1c7b0e64
- MD5 e0c73875f7fc9e36a3719e40b1b620f9
- SHA1 87f2c914c1069fa2e4d059836e036c99de94bfdc
- SHA512 f99e675df4d8e9a4d26785f9b348c387a6f68290840809c1d1ee1a74f215787501a7a88d5a1e7e1fd1b8462dba8eb0821a3befa8564b9f88dfc77b5e3ccb0a9e
- SSDEEP 393216:llHY/zHr530DGanZZ/8lC/kEj8myRsrL3RcRHvdsJWuKb3yYvwzR6:L20D/ZZZ60JWuKDU
- TLSH T15857BE15A2B941A9D16BC274C7568733EB71786003309AEF15A8DAB11FB3EE01B7F721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-05_e0c73875f7fc9e36a3719e40b1b620f9_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_e0c73875f7fc9e36a3719e40b1b620f9_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_e0c73875f7fc9e36a3719e40b1b620f9_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar
- Size 27.3MB
- SHA256 8a1a80bb7ae3fa5417147663852161266f8e525bb01d95cffcdafdcc1c7b0e64
- MD5 e0c73875f7fc9e36a3719e40b1b620f9
- SHA1 87f2c914c1069fa2e4d059836e036c99de94bfdc
- SHA512 f99e675df4d8e9a4d26785f9b348c387a6f68290840809c1d1ee1a74f215787501a7a88d5a1e7e1fd1b8462dba8eb0821a3befa8564b9f88dfc77b5e3ccb0a9e
- SSDEEP 393216:llHY/zHr530DGanZZ/8lC/kEj8myRsrL3RcRHvdsJWuKb3yYvwzR6:L20D/ZZZ60JWuKDU
- TLSH T15857BE15A2B941A9D16BC274C7568733EB71786003309AEF15A8DAB11FB3EE01B7F721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.