General
- Target 2026-08-10_62fb5270827879d43dad48ccc7886ff1_amadey_coinminer_elex_glassworm_icedid_luca-stealer_njrat
- Size 5.0MB
- Sample260810-q45laazeme
- SHA256 cab499527c6037d74042509b123222219f1d5b0124d4fc4a0509a8e67921d193
- MD5 62fb5270827879d43dad48ccc7886ff1
- SHA1 3fb48601a175b429d650ee313f179c87e9f04d6b
- SHA512 5ce284381796f8ada1bf2b19ca20d70f0415210dbb9dda650c1f82a35393a63c241e1e438b04d03c59542ee99418cf68d5c3bfb10e1ceaf756fdecb7c6f5aeb2
- SSDEEP 98304:j1aCQ1JSrBkvAKKZg2C2S8aQ2txmWWFfnr1TIEAGnwE4Ng06pTjr248/h:j1aCSSwKZgFQGmfrxIEAbNg06p8/
- TLSH T1B636AE11BB85807AD27303304958EE75A9BDB9703B78B1EB7ED45B1D59309C26A30B2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_62fb5270827879d43dad48ccc7886ff1_amadey_coinminer_elex_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_62fb5270827879d43dad48ccc7886ff1_amadey_coinminer_elex_glassworm_icedid_luca-stealer_njrat
- Size 5.0MB
- SHA256 cab499527c6037d74042509b123222219f1d5b0124d4fc4a0509a8e67921d193
- MD5 62fb5270827879d43dad48ccc7886ff1
- SHA1 3fb48601a175b429d650ee313f179c87e9f04d6b
- SHA512 5ce284381796f8ada1bf2b19ca20d70f0415210dbb9dda650c1f82a35393a63c241e1e438b04d03c59542ee99418cf68d5c3bfb10e1ceaf756fdecb7c6f5aeb2
- SSDEEP 98304:j1aCQ1JSrBkvAKKZg2C2S8aQ2txmWWFfnr1TIEAGnwE4Ng06pTjr248/h:j1aCSSwKZgFQGmfrxIEAbNg06p8/
- TLSH T1B636AE11BB85807AD27303304958EE75A9BDB9703B78B1EB7ED45B1D59309C26A30B2F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1