General
- Target 2026-09-06_72c1bb960e83def95479e69b4bce8a9e_coinminer_gazer_glassworm_helldown_icedid_luca-stealer_njrat_remcos
- Size 12.4MB
- Sample260907-bap66stwes
- SHA256 464c562d1ce2100e8c97bb350d60ee4a8f47b7d5c6e8c6795d659edcfa7ea9d4
- MD5 72c1bb960e83def95479e69b4bce8a9e
- SHA1 be3aa974033e7af0e305697c2f395190b06fcaa0
- SHA512 4c3e59b9d2bb73c3776868c3e9f422ca950cd944fdc185803df7b1df65578f197829b257bf3cf1386f71e4c335fd8fe66fbf0d4f4816598f34a02a2781d998b5
- SSDEEP 196608:3ppwY6JDlaLT5qOSqY3eOvvyVV8D2nFafh:3puJDlaLdq22eOv6oSnFafh
- TLSH T13DD69D6AF2B600D8C457C17881666323EB72B8594B7066DF266866B52F73BE01F7DF00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-06_72c1bb960e83def95479e69b4bce8a9e_coinminer_gazer_glassworm_helldown_icedid_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-06_72c1bb960e83def95479e69b4bce8a9e_coinminer_gazer_glassworm_helldown_icedid_luca-stealer_njrat_remcos.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-06_72c1bb960e83def95479e69b4bce8a9e_coinminer_gazer_glassworm_helldown_icedid_luca-stealer_njrat_remcos
- Size 12.4MB
- SHA256 464c562d1ce2100e8c97bb350d60ee4a8f47b7d5c6e8c6795d659edcfa7ea9d4
- MD5 72c1bb960e83def95479e69b4bce8a9e
- SHA1 be3aa974033e7af0e305697c2f395190b06fcaa0
- SHA512 4c3e59b9d2bb73c3776868c3e9f422ca950cd944fdc185803df7b1df65578f197829b257bf3cf1386f71e4c335fd8fe66fbf0d4f4816598f34a02a2781d998b5
- SSDEEP 196608:3ppwY6JDlaLT5qOSqY3eOvvyVV8D2nFafh:3puJDlaLdq22eOv6oSnFafh
- TLSH T13DD69D6AF2B600D8C457C17881666323EB72B8594B7066DF266866B52F73BE01F7DF00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Looks for VMWare services registry key.