General
- Target 2026-08-21_f7c331999676c6c6e3dceb02ca721203_coinminer_glassworm_icedid_luca-stealer_njrat_poet-rat_sliver_snatch_vidar_xmrig
- Size 10.1MB
- Sample260821-1wsa4ade62
- SHA256 08714c1219b47eca3d71e5802fa80c18e30e8c19b5e945ea1e714952eaa80807
- MD5 f7c331999676c6c6e3dceb02ca721203
- SHA1 63ffc083fe3a5fcba0407ffab86d62e376402272
- SHA512 b3d5517b1e558b84ba54d92c332838438a01ad22c3542052b8a0dac1aaf8ce95aca8789df5efe5312075e5ec9d3b6ab8c8354c139195ab73404c8e23a3e226d2
- SSDEEP 98304:BDmioh2VQt+/Rcxx4eoOfXOfEQ502MSQeVlIonoOvv7NpF8K:BDmZh2VQtqcA7n50moOvv7Nr8K
- TLSH T19FB65B07F89704F5C2BEE03486A25322BA72306943317BD72F9446992B63FE47A7E754
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-21_f7c331999676c6c6e3dceb02ca721203_coinminer_glassworm_icedid_luca-stealer_njrat_poet-rat_sliver_snatch_vidar_xmrig.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_f7c331999676c6c6e3dceb02ca721203_coinminer_glassworm_icedid_luca-stealer_njrat_poet-rat_sliver_snatch_vidar_xmrig.exe
Resource
win11ltsc2024-20260709-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_f7c331999676c6c6e3dceb02ca721203_coinminer_glassworm_icedid_luca-stealer_njrat_poet-rat_sliver_snatch_vidar_xmrig
- Size 10.1MB
- SHA256 08714c1219b47eca3d71e5802fa80c18e30e8c19b5e945ea1e714952eaa80807
- MD5 f7c331999676c6c6e3dceb02ca721203
- SHA1 63ffc083fe3a5fcba0407ffab86d62e376402272
- SHA512 b3d5517b1e558b84ba54d92c332838438a01ad22c3542052b8a0dac1aaf8ce95aca8789df5efe5312075e5ec9d3b6ab8c8354c139195ab73404c8e23a3e226d2
- SSDEEP 98304:BDmioh2VQt+/Rcxx4eoOfXOfEQ502MSQeVlIonoOvv7NpF8K:BDmZh2VQtqcA7n50moOvv7Nr8K
- TLSH T19FB65B07F89704F5C2BEE03486A25322BA72306943317BD72F9446992B63FE47A7E754
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts a large (66525) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
XMRig Miner payload
-
Creates new service(s)
-
Loads dropped DLL
-
Stops running service(s)