General
- Target 2026-08-06_82e3d13255961e6d96098dd191442c68_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar
- Size 27.3MB
- Sample260807-ax4gmsdm3t
- SHA256 c8de680a9e24d751e86b7b54949ab765d52be075f01921ac635a537e161579f3
- MD5 82e3d13255961e6d96098dd191442c68
- SHA1 1a58d2e00df5b7b6a5c6e784d7629b3f392294b2
- SHA512 3b0acbfe9635a261982c76851ac0a2d35ff72f85dc723941f701eab0547b0762fe3babf18ecc075427826f1ab969aacda95579731cdf22876f1dd54e6425c59f
- SSDEEP 393216:bhZp+GZknY0DGanZZ/8lC/kEj8myRsrL3RcRHvdsJWuKb3yYvfUI/tfW:7V0D/ZZZ60JWuKDU8
- TLSH T10D57BE15A2B941A9D16BC274C7568733EB71786003309AEF15A8DAB11FB3EE01B7F721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-06_82e3d13255961e6d96098dd191442c68_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_82e3d13255961e6d96098dd191442c68_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_82e3d13255961e6d96098dd191442c68_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar
- Size 27.3MB
- SHA256 c8de680a9e24d751e86b7b54949ab765d52be075f01921ac635a537e161579f3
- MD5 82e3d13255961e6d96098dd191442c68
- SHA1 1a58d2e00df5b7b6a5c6e784d7629b3f392294b2
- SHA512 3b0acbfe9635a261982c76851ac0a2d35ff72f85dc723941f701eab0547b0762fe3babf18ecc075427826f1ab969aacda95579731cdf22876f1dd54e6425c59f
- SSDEEP 393216:bhZp+GZknY0DGanZZ/8lC/kEj8myRsrL3RcRHvdsJWuKb3yYvfUI/tfW:7V0D/ZZZ60JWuKDU8
- TLSH T10D57BE15A2B941A9D16BC274C7568733EB71786003309AEF15A8DAB11FB3EE01B7F721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.