General
- Target 2026-08-09_007008e9f5d6e74f387c32fa5596f521_coinminer_glassworm_icedid_njrat_poet-rat_remcos_stealc
- Size 76.8MB
- Sample260809-sewm7agq81
- SHA256 96b962fd26d59eaf36fb212b754afc5d675b0f2be1ecfd5ae44e240c0bd87b0b
- MD5 007008e9f5d6e74f387c32fa5596f521
- SHA1 90b778b396bee2b6e06d589533c63fda7d8bf250
- SHA512 7f8f927bd5ea2f314ee25d8d4c4edae1681d70692ad1cec3e0e7b347f03b74988e212c59a8f16cf46b22c9c35d742f5b88b2a0061c6c20a4baf79adb02614237
- SSDEEP 1572864:x/ZZkUWuKDaosPLNJ1bm07Ort0MyQNRr4UX6ghc:6Rao0pbm07OOhKRigh
- TLSH T1F408AD1123FD7E96F0B30730B7B64BF0DA3ABC655A14C16F10943A1F2A76A81B925376
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-09_007008e9f5d6e74f387c32fa5596f521_coinminer_glassworm_icedid_njrat_poet-rat_remcos_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_007008e9f5d6e74f387c32fa5596f521_coinminer_glassworm_icedid_njrat_poet-rat_remcos_stealc.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_007008e9f5d6e74f387c32fa5596f521_coinminer_glassworm_icedid_njrat_poet-rat_remcos_stealc
- Size 76.8MB
- SHA256 96b962fd26d59eaf36fb212b754afc5d675b0f2be1ecfd5ae44e240c0bd87b0b
- MD5 007008e9f5d6e74f387c32fa5596f521
- SHA1 90b778b396bee2b6e06d589533c63fda7d8bf250
- SHA512 7f8f927bd5ea2f314ee25d8d4c4edae1681d70692ad1cec3e0e7b347f03b74988e212c59a8f16cf46b22c9c35d742f5b88b2a0061c6c20a4baf79adb02614237
- SSDEEP 1572864:x/ZZkUWuKDaosPLNJ1bm07Ort0MyQNRr4UX6ghc:6Rao0pbm07OOhKRigh
- TLSH T1F408AD1123FD7E96F0B30730B7B64BF0DA3ABC655A14C16F10943A1F2A76A81B925376
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with VMProtect.
-
Suspicious use of NtSetInformationThreadHideFromDebugger