General

  • Target
    2026-08-23_4b7e89e739abb057d6101173a55cf830_amadey_coinminer_glassworm_hijackloader_icedid_luca-stealer_njrat_stealc
  • Size 23.0MB
  • Sample260824-pkklbstshy
  • SHA256 e64cd1ddffd68444f4444e5c98cb63fe9d1086b8e23a2edbf5fda843a5335b5b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Targets

    • Target
      2026-08-23_4b7e89e739abb057d6101173a55cf830_amadey_coinminer_glassworm_hijackloader_icedid_luca-stealer_njrat_stealc
    • Size 23.0MB
    • SHA256 e64cd1ddffd68444f4444e5c98cb63fe9d1086b8e23a2edbf5fda843a5335b5b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    • Detected Nirsoft tools

      Free utilities often used by attackers which can steal passwords, product keys, etc.

    • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers

    • Detects executables manipulated with Fody

    • Detects executables referencing many IR and analysis tools

    • UPX dump on OEP (original entry point)

MITRE ATT&CK Matrix

Tasks