General
- Target 2026-08-08_bd44a6ddba3a99c792d5c7de5479d8eb_coinminer_dosia_glassworm_icedid_luca-stealer_njrat_poet-rat_quasar-rat_remcos_snatch_vidar
- Size 12.2MB
- Sample260808-dat68s1ycx
- SHA256 92548cc81fb889424b98c52025ea9d685cb163f05963f00d917d8dd1dda74dce
- MD5 bd44a6ddba3a99c792d5c7de5479d8eb
- SHA1 b5ff49a93634aa5822e619b8aee856da66148e78
- SHA512 e61498c2b6f5768ae16c34457a67b3431565dda3e3ce74b034a0689f0028e9efac860c8ab3cbe39a560e89999fb3fb056ee95d825ca16a75f2b83db4ff2e1402
- SSDEEP 196608:rztrQjXc/sRV3QqZcRRvNDvmIxTH+vLjjXN9y:reXksL3Ry7vND+KTkvz
- TLSH T1BCD67C03EC6519E9C1AED230CAA292637B727C440B3667E71B50F6386F76BD0AD79710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_bd44a6ddba3a99c792d5c7de5479d8eb_coinminer_dosia_glassworm_icedid_luca-stealer_njrat_poet.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_bd44a6ddba3a99c792d5c7de5479d8eb_coinminer_dosia_glassworm_icedid_luca-stealer_njrat_poet.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_bd44a6ddba3a99c792d5c7de5479d8eb_coinminer_dosia_glassworm_icedid_luca-stealer_njrat_poet-rat_quasar-rat_remcos_snatch_vidar
- Size 12.2MB
- SHA256 92548cc81fb889424b98c52025ea9d685cb163f05963f00d917d8dd1dda74dce
- MD5 bd44a6ddba3a99c792d5c7de5479d8eb
- SHA1 b5ff49a93634aa5822e619b8aee856da66148e78
- SHA512 e61498c2b6f5768ae16c34457a67b3431565dda3e3ce74b034a0689f0028e9efac860c8ab3cbe39a560e89999fb3fb056ee95d825ca16a75f2b83db4ff2e1402
- SSDEEP 196608:rztrQjXc/sRV3QqZcRRvNDvmIxTH+vLjjXN9y:reXksL3Ry7vND+KTkvz
- TLSH T1BCD67C03EC6519E9C1AED230CAA292637B727C440B3667E71B50F6386F76BD0AD79710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Modifies file permissions
-
Obfuscated Files or Information: Command Obfuscation
Adversaries may obfuscate content during command execution to impede detection.
-
Suspicious use of NtSetInformationThreadHideFromDebugger