General
- Target 2026-08-31_88d3c01c279f8d71b890d275785c0a8b_coinminer_elex_glassworm_icedid_njrat
- Size 4.0MB
- Sample260831-v583bazvcv
- SHA256 5fc4c9b650ad45aec7ce6444845aa975eb8e31ff09c63060aed1b05e0dc96170
- MD5 88d3c01c279f8d71b890d275785c0a8b
- SHA1 d3336897166c28cce48214f057c228800e3b055b
- SHA512 d09e8274f1118bd40cb6d3de4cdc4f9ea31c9e50347f3f9fa81326e71a9eae2d1898414d45a662171b7abdfc1b3ae5c18262770528005ea3cae8c7d36b843649
- SSDEEP 98304:xE3PnLrHp/qKm2/Sb/gqAZj+UzKb3HtFj:0rRb/G8+Hj
- TLSH T150165853EB814AD5F3890536DE548100D32AF9299BEB1321346C224DDFA7387BF65A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-31_88d3c01c279f8d71b890d275785c0a8b_coinminer_elex_glassworm_icedid_njrat.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-31_88d3c01c279f8d71b890d275785c0a8b_coinminer_elex_glassworm_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-31_88d3c01c279f8d71b890d275785c0a8b_coinminer_elex_glassworm_icedid_njrat
- Size 4.0MB
- SHA256 5fc4c9b650ad45aec7ce6444845aa975eb8e31ff09c63060aed1b05e0dc96170
- MD5 88d3c01c279f8d71b890d275785c0a8b
- SHA1 d3336897166c28cce48214f057c228800e3b055b
- SHA512 d09e8274f1118bd40cb6d3de4cdc4f9ea31c9e50347f3f9fa81326e71a9eae2d1898414d45a662171b7abdfc1b3ae5c18262770528005ea3cae8c7d36b843649
- SSDEEP 98304:xE3PnLrHp/qKm2/Sb/gqAZj+UzKb3HtFj:0rRb/G8+Hj
- TLSH T150165853EB814AD5F3890536DE548100D32AF9299BEB1321346C224DDFA7387BF65A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of file extensions in Explorer
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.