General
- Target 2026-09-13_aa905fee70ab4732671861841127c63c_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar
- Size 29.1MB
- Sample260913-nqvstaae96
- SHA256 2932e21a95cb17645ae715b1024a7e561a3496ba3d19e4a32dbb5196966ee4c1
- MD5 aa905fee70ab4732671861841127c63c
- SHA1 35e9e5ab1bd3177f01d82bd306b57fa1d35a8f61
- SHA512 2c7bf19bd25c42c5b677554d32e7b5f17c016c1bb79ae610baa6a146587d74e2a8eb33bcbcd5219bff82b2a60f343d0dda37e53840721bb51cbb3c71e63366b6
- SSDEEP 393216:3Pfj+5N6QHNaoXL/9HsiQ4rxu5lWftYJMyk1lxp/8/cVu9L:f8taCiE/mcY
- TLSH T1F267AE1196B881A9C67BD634D7524733EB71786403309AFF11A8DAB11E77EE01B7E322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-13_aa905fee70ab4732671861841127c63c_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-13_aa905fee70ab4732671861841127c63c_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-13_aa905fee70ab4732671861841127c63c_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar
- Size 29.1MB
- SHA256 2932e21a95cb17645ae715b1024a7e561a3496ba3d19e4a32dbb5196966ee4c1
- MD5 aa905fee70ab4732671861841127c63c
- SHA1 35e9e5ab1bd3177f01d82bd306b57fa1d35a8f61
- SHA512 2c7bf19bd25c42c5b677554d32e7b5f17c016c1bb79ae610baa6a146587d74e2a8eb33bcbcd5219bff82b2a60f343d0dda37e53840721bb51cbb3c71e63366b6
- SSDEEP 393216:3Pfj+5N6QHNaoXL/9HsiQ4rxu5lWftYJMyk1lxp/8/cVu9L:f8taCiE/mcY
- TLSH T1F267AE1196B881A9C67BD634D7524733EB71786403309AFF11A8DAB11E77EE01B7E322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.