General
- Target 2026-08-09_d4022fd6d44a6b3a62a653126c175485_coinminer_glassworm_icedid_luca-stealer_njrat_quasar-rat_stealc_xmrig
- Size 7.2MB
- Sample260809-pltkmaep9z
- SHA256 8661075ff25b12749fc60e71884bf91e1574c94b1837987b0f07a86fb45a7ed6
- MD5 d4022fd6d44a6b3a62a653126c175485
- SHA1 0ba5f3af266b8d3352b6e89e5151c19e20daafdb
- SHA512 b4a648045b06e3c88539e32ed35d49c98f742d7b0b0702d8dc2c9a1c7e891b9b7b56d86606fffef652c0e0eaca37cca1235b82360257e0cbee66b86336f3d79d
- SSDEEP 98304:EueL65o3zC6Ob2cUl/6pRedsp/KepIKJaz3eHp+ee6Mjr:Lu65QzCt6cUIp+spiep70qHpNcjr
- TLSH T118768C57A2A540E8C87BC178CA865633E7B1B8155370ABDF16A4E7361F33AD01E3E724
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-09_d4022fd6d44a6b3a62a653126c175485_coinminer_glassworm_icedid_luca-stealer_njrat_quasar-rat_stealc_xmrig.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_d4022fd6d44a6b3a62a653126c175485_coinminer_glassworm_icedid_luca-stealer_njrat_quasar-rat_stealc_xmrig
- Size 7.2MB
- SHA256 8661075ff25b12749fc60e71884bf91e1574c94b1837987b0f07a86fb45a7ed6
- MD5 d4022fd6d44a6b3a62a653126c175485
- SHA1 0ba5f3af266b8d3352b6e89e5151c19e20daafdb
- SHA512 b4a648045b06e3c88539e32ed35d49c98f742d7b0b0702d8dc2c9a1c7e891b9b7b56d86606fffef652c0e0eaca37cca1235b82360257e0cbee66b86336f3d79d
- SSDEEP 98304:EueL65o3zC6Ob2cUl/6pRedsp/KepIKJaz3eHp+ee6Mjr:Lu65QzCt6cUIp+spiep70qHpNcjr
- TLSH T118768C57A2A540E8C87BC178CA865633E7B1B8155370ABDF16A4E7361F33AD01E3E724
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of SetThreadContext