Analysis
- max time kernel
148s - max time network
140s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
15/08/2026, 12:09
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-15_bca59b10258dc8b776b4b39fb9046344_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_bca59b10258dc8b776b4b39fb9046344_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 2026-08-15_bca59b10258dc8b776b4b39fb9046344_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe
- Size 11.3MB
- Sample260815-pbn76abl6t
- SHA256 83a7607902bdb45238909a2dbf3f8198f6a749bb71b624319db0269ef916d08d
- MD5 bca59b10258dc8b776b4b39fb9046344
- SHA1 258836017039a747f7ab5d955516a43b129d42aa
- SHA512 4822727253924928e6302b3e0d9bcec14f3ca88ef5078489b9813043172b1c18feebb826be17cd5b728a6e9934ff3de5d6cd06294b2b260febaa8ca8b3806d24
- SSDEEP 196608:XElX4yFTl8XzKBcJCgZwWEZw6p+IIpNu/NW9qzeYGOmx+Ob4:XElX4yFTl8XzKBcJCgZwWECM/NW9WeY6
- TLSH T1D8C6B098A1B800E4C0FAC5B8826796E3DB75F51013B116DBB9180EB92FABDD21D7F345
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Malware Config
Signatures
- Detects executables packed with Enigma 3 IoCs
resource yara_rule behavioral2/memory/4684-0-0x0000000140000000-0x0000000140ACB000-memory.dmp INDICATOR_EXE_Packed_Enigma behavioral2/memory/4684-11-0x0000000140000000-0x0000000140ACB000-memory.dmp INDICATOR_EXE_Packed_Enigma behavioral2/memory/4684-38-0x0000000140000000-0x0000000140ACB000-memory.dmp INDICATOR_EXE_Packed_Enigma - Loads dropped DLL 1 IoCs
pid Process 4684 2026-08-15_bca59b10258dc8b776b4b39fb9046344_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-15_bca59b10258dc8b776b4b39fb9046344_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-15_bca59b10258dc8b776b4b39fb9046344_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe"1⤵
- Loads dropped DLL
PID:4684
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\evb7B42.tmp
- Size 1KB
- SHA256 acbde6bf0cb497f7ee7e54dd253ddfaf963203d26770772fabb66a778157b80f
- MD5 fc05e7c738f62b071b8a818b1ef6288e
- SHA1 8392159e22c26c4bceaff8fd2d8d53aa2241a7c9
- SHA512 a95491ee9baaf263f3de7e05baf3fe0793765881721662904ca6e65f4fde99b7284f46e145ab822b73facdafa67630741d4c792387c55ddb48df8a4e4002b483
- TLSH T16C315E12DA21CAB2C14D07789AD2956C26B86C7453E917660FA004BDFC857304A79D59
- MD5 SHA1 SHA512 TLSH