2026-08-09_d1a3dba2289b5c785504f054a4dbe907_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-09_d1a3dba2289b5c785504f054a4dbe907_coinminer_glassworm_icedid_luca-stealer_njrat_stealc
Size 71.5MB
Sample260809-jkpx6atble
SHA256 65832b7592e7907179d2c9603c385df88eae6fcbd0de4d4b3d262fdc6ca87c15
MD5 d1a3dba2289b5c785504f054a4dbe907
SHA1 8a46661cc8777dd78fe29f3cd78504260970a4b4
SHA512 d1193614333620bfb99dfcf38a1a9479f46ebd5db4bde26e8ab18ff5ce9fb614bca35f661b0dd55f0cb53ab79138d4c9245701da39f8c42647bfa0a2008cc907
SSDEEP 786432:iiPjUv2+jb1B56uEJLAEdnvWF4uCL5jRWX4+vl:iiPjUv2+jb1B56uWLAWntR
TLSH
T185F7834C24110EE8916BE815AA67CF1B5FF9DAEB4AE8654DBCA58E340CD3CF7181074B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_d1a3dba2289b5c785504f054a4dbe907_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

File Explorer

2026-08-09_d1a3dba2289b5c785504f054a4dbe907_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

.exe 71.5MB

2026-08-09_d1a3dba2289b5c785504f054a4dbe907_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

IMPHASH 74e66699d87128775daff012384a9932
SHA256 65832b7592e7907179d2c9603c385df88eae6fcbd0de4d4b3d262fdc6ca87c15
MD5 d1a3dba2289b5c785504f054a4dbe907
SHA1 8a46661cc8777dd78fe29f3cd78504260970a4b4
SHA512 d1193614333620bfb99dfcf38a1a9479f46ebd5db4bde26e8ab18ff5ce9fb614bca35f661b0dd55f0cb53ab79138d4c9245701da39f8c42647bfa0a2008cc907
SSDEEP 786432:iiPjUv2+jb1B56uEJLAEdnvWF4uCL5jRWX4+vl:iiPjUv2+jb1B56uWLAWntR
TLSH
T185F7834C24110EE8916BE815AA67CF1B5FF9DAEB4AE8654DBCA58E340CD3CF7181074B
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

55827828

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

winhttp

WinHttpCloseHandle WinHttpConnect WinHttpReadData WinHttpQueryDataAvailable WinHttpSetOption WinHttpSetTimeouts WinHttpOpenRequest WinHttpAddRequestHeaders WinHttpSendRequest WinHttpReceiveResponse WinHttpQueryHeaders WinHttpOpen

bcrypt

BCryptGetProperty BCryptSetProperty BCryptCloseAlgorithmProvider BCryptGenerateSymmetricKey BCryptEncrypt BCryptDecrypt BCryptDestroyKey BCryptCreateHash BCryptHashData BCryptFinishHash BCryptDestroyHash BCryptOpenAlgorithmProvider

crypt32

CryptBinaryToStringA CryptStringToBinaryA

advapi32

LookupAccountSidA GetLengthSid IsValidSid GetTokenInformation OpenThreadToken ConvertSidToStringSidA OpenProcessToken CopySid CryptGenRandom CryptReleaseContext CryptAcquireContextA QueryServiceStatus OpenServiceW OpenSCManagerW CloseServiceHandle RegSetValueExA RegQueryValueExA RegOpenKeyExW RegCloseKey SetSecurityDescriptorDacl InitializeSecurityDescriptor

user32

GetWindowThreadProcessId FindWindowW UnregisterClassA GetAsyncKeyState

kernel32

FlsSetValue FlsFree GetDateFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadConsoleW GetTimeZoneInformation IsValidCodePage GetACP GetTimeFormatW FlsGetValue FlsAlloc GetFileType CreateProcessW GetStdHandle GetEnvironmentVariableA CreateDirectoryA CreateFileA CreateFileW DeleteFileW GetFileSizeEx ReadFile SetFileAttributesA SetFileAttributesW SetFilePointerEx WriteFile GetTempPathW GetVolumeInformationA IsDebuggerPresent GetOEMCP Beep CloseHandle GetLastError SetLastError SetErrorMode ConnectNamedPipe CreateNamedPipeW HeapAlloc HeapFree GetProcessHeap CancelIoEx CreateMutexW Sleep GetCurrentProcess ExitProcess TerminateProcess GetThreadContext OpenProcess GetLocalTime GetTickCount64 GetSystemDirectoryW VirtualAlloc FreeLibrary GetModuleHandleA GetModuleHandleW GetProcAddress LoadLibraryExW LoadResource LockResource SizeofResource FindResourceW LoadLibraryA CopyFileW WideCharToMultiByte SetConsoleCtrlHandler FillConsoleOutputCharacterA FillConsoleOutputAttribute GetConsoleCursorInfo SetConsoleCursorInfo GetConsoleScreenBufferInfo SetConsoleCursorPosition SetConsoleTextAttribute WriteConsoleOutputCharacterA SetConsoleTitleA CreateToolhelp32Snapshot Process32FirstW Process32NextW GetCurrentProcessId GetCurrentThreadId GetExitCodeProcess WaitForSingleObject GetCommandLineW GetCommandLineA GetModuleFileNameW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle SetEndOfFile WriteConsoleW CheckRemoteDebuggerPresent SleepConditionVariableSRW GetModuleHandleExW QueryPerformanceCounter QueryPerformanceFrequency ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive RtlUnwind LocalFree FormatMessageA GetLocaleInfoEx FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW AreFileApisANSI GetFileInformationByHandleEx MultiByteToWideChar EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection GetSystemTimeAsFileTime WakeAllConditionVariable EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo K32GetModuleInformation AddVectoredExceptionHandler RaiseException HeapDestroy HeapReAlloc HeapSize DuplicateHandle GetSystemInfo IsWow64Process VirtualFreeEx GetSystemDirectoryA SetFilePointer VirtualAllocEx GetTickCount RemoveVectoredExceptionHandler VirtualFree VirtualQuery VirtualProtect GetFileSize CreateFileMappingA MapViewOfFile UnmapViewOfFile RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent InitializeSListHead OutputDebugStringW RtlPcToFileHeader RtlUnwindEx InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree CreateThread ExitThread FreeLibraryAndExitThread

dbghelp

ImageDirectoryEntryToData

userenv

UnloadUserProfile

shlwapi

ord215

ntdll

NtMapViewOfSection NtUnmapViewOfSection NtClose NtCreateSection RtlImageNtHeader

Name

.text

Size

53.4MB

Virtual Size

53.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

155KB

Virtual Size

154KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8.3MB

Virtual Size

8.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

7.6MB

Virtual Size

7.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2.1MB

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_d1a3dba2289b5c785504f054a4dbe907_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

winhttp

bcrypt

crypt32

advapi32

user32

kernel32

dbghelp

userenv

shlwapi

ntdll

generic