General
- Target 2026-09-09_04db0e7872064650fe622709148a4ce8_coinminer_elex_glassworm_icedid_njrat
- Size 4.0MB
- Sample260910-a8869sck8v
- SHA256 e24d2fa2dc24743aed9ac5a08978a5c0a517554cd07c02b85f074b6b1e0f2461
- MD5 04db0e7872064650fe622709148a4ce8
- SHA1 87d8f2d1b79982ae128c9e6186e4af84bd91a343
- SHA512 28e143960e0975625ed3b7386f8e427af5819a1fb5bb07cafc025181d2d0138f5e2e36cb826d0900a0521c89a22346463c425050f77ba46f3de3c08209749b10
- SSDEEP 98304:xE3PnLrHp/qKm2/Sb/gqAZj+UzKb3HtFj:0rRb/G8+Hj
- TLSH T15D165853EB814AD5F3890536DE548100D32AF9299BEB1321346C224DDFA7387BF65A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-09_04db0e7872064650fe622709148a4ce8_coinminer_elex_glassworm_icedid_njrat.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-09_04db0e7872064650fe622709148a4ce8_coinminer_elex_glassworm_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_04db0e7872064650fe622709148a4ce8_coinminer_elex_glassworm_icedid_njrat
- Size 4.0MB
- SHA256 e24d2fa2dc24743aed9ac5a08978a5c0a517554cd07c02b85f074b6b1e0f2461
- MD5 04db0e7872064650fe622709148a4ce8
- SHA1 87d8f2d1b79982ae128c9e6186e4af84bd91a343
- SHA512 28e143960e0975625ed3b7386f8e427af5819a1fb5bb07cafc025181d2d0138f5e2e36cb826d0900a0521c89a22346463c425050f77ba46f3de3c08209749b10
- SSDEEP 98304:xE3PnLrHp/qKm2/Sb/gqAZj+UzKb3HtFj:0rRb/G8+Hj
- TLSH T15D165853EB814AD5F3890536DE548100D32AF9299BEB1321346C224DDFA7387BF65A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of file extensions in Explorer
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.