General
- Target 2026-09-06_02689adc8702e705b01a77803734020e_coinminer_glassworm_icedid_luca-stealer_njrat_quasar-rat_stealc_xmrig
- Size 7.2MB
- Sample260907-km1ccasgle
- SHA256 1f26c5e40fee52e2f0e0c8d931ccd0d34c8adaa704b0bd2a6507fc8100384fb2
- MD5 02689adc8702e705b01a77803734020e
- SHA1 9f8c34d20bdf2431332a54e09aea0879115896d5
- SHA512 a3af6be86ff665780adb57ef5d4a398a802c011b2ecc9670b7a2fcfae6775d3412bb290067a8801a8b18d2e9d94ab96cfa98607239e3071e18a0129d97c1fd5f
- SSDEEP 98304:mZTL65w3zC6Ob2cUl/6pRedsp/KepIKJaz3eHp+ee6Mjr:iX65IzCt6cUIp+spiep70qHpNcjr
- TLSH T1A1768C57A2A540E8C87BC178C6865633E6B1B8195370ABDF16A4E7361F33ED01E3E724
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-06_02689adc8702e705b01a77803734020e_coinminer_glassworm_icedid_luca-stealer_njrat_quasar-rat_stealc_xmrig.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-06_02689adc8702e705b01a77803734020e_coinminer_glassworm_icedid_luca-stealer_njrat_quasar-rat_stealc_xmrig
- Size 7.2MB
- SHA256 1f26c5e40fee52e2f0e0c8d931ccd0d34c8adaa704b0bd2a6507fc8100384fb2
- MD5 02689adc8702e705b01a77803734020e
- SHA1 9f8c34d20bdf2431332a54e09aea0879115896d5
- SHA512 a3af6be86ff665780adb57ef5d4a398a802c011b2ecc9670b7a2fcfae6775d3412bb290067a8801a8b18d2e9d94ab96cfa98607239e3071e18a0129d97c1fd5f
- SSDEEP 98304:mZTL65w3zC6Ob2cUl/6pRedsp/KepIKJaz3eHp+ee6Mjr:iX65IzCt6cUIp+spiep70qHpNcjr
- TLSH T1A1768C57A2A540E8C87BC178C6865633E6B1B8195370ABDF16A4E7361F33ED01E3E724
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of SetThreadContext