2026-09-16_39424c39188f49f9daee381e45e8609f_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-16_39424c39188f49f9daee381e45e8609f_coinminer_glassworm_icedid_luca-stealer_njrat_stealc
Size 19.9MB
Sample260916-2fvxqa1t3m
SHA256 c70c65c538e95620ca2be792afffdef8a7f0eb25cca69b2193b3b024d339e941
MD5 39424c39188f49f9daee381e45e8609f
SHA1 34b6f56ccbe54ff99c818d8be118272f30ce18a2
SHA512 9c7df72e9ac8b69ba31bd0e69c2679a51deb4293e7ed888a6855ca27d702a05b44bfbd486112a1c0b1bfc64edbad54ed20455a63f36c54fa81fc99adc2b1644a
SSDEEP 393216:ueZZMJKDIKe73vr3fiP6wU2m+/7Hkq8G5V9/e5dGuxxNyGe9:uX73vj2Eo7Gz
TLSH
T17E27CFABB2A501ECD0B7C074CA569917E7B1744A03B06BEF0AA049661F67AF05F3F711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-16_39424c39188f49f9daee381e45e8609f_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

File Explorer

2026-09-16_39424c39188f49f9daee381e45e8609f_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

.exe 19.9MB

2026-09-16_39424c39188f49f9daee381e45e8609f_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

IMPHASH 9ecc503e0f501945dda575842f676412
SHA256 c70c65c538e95620ca2be792afffdef8a7f0eb25cca69b2193b3b024d339e941
MD5 39424c39188f49f9daee381e45e8609f
SHA1 34b6f56ccbe54ff99c818d8be118272f30ce18a2
SHA512 9c7df72e9ac8b69ba31bd0e69c2679a51deb4293e7ed888a6855ca27d702a05b44bfbd486112a1c0b1bfc64edbad54ed20455a63f36c54fa81fc99adc2b1644a
SSDEEP 393216:ueZZMJKDIKe73vr3fiP6wU2m+/7Hkq8G5V9/e5dGuxxNyGe9:uX73vj2Eo7Gz
TLSH
T17E27CFABB2A501ECD0B7C074CA569917E7B1744A03B06BEF0AA049661F67AF05F3F711
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9109576

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\bot\temp\PPSSPPWindows64.pdb

avrt

AvRevertMmThreadCharacteristics AvSetMmThreadCharacteristicsW

dwmapi

DwmSetWindowAttribute

uxtheme

OpenThemeData DrawThemeBackground DrawThemeText CloseThemeData

shlwapi

ord219

comctl32

InitCommonControlsEx ImageList_ReplaceIcon ImageList_Create

setupapi

SetupDiGetClassDevsW SetupDiGetDeviceInterfaceDetailW SetupDiEnumDeviceInterfaces SetupDiDestroyDeviceInfoList

hid

HidD_GetAttributes HidP_GetCaps HidD_SetOutputReport HidD_GetHidGuid HidD_FreePreparsedData HidD_GetPreparsedData

opengl32

glBlendFunc glClearDepth glClearStencil glColorMask glCullFace glDepthFunc glDepthMask glDepthRange glFrontFace glGetFloatv glGetTexImage glGetTexLevelParameteriv glLogicOp glReadBuffer glReadPixels glBindTexture glStencilMask glStencilOp glTexParameterf glTexSubImage2D glClearColor glDeleteTextures glDisable glDrawElements glEnable glGenTextures glPixelStorei glScissor glGetIntegerv glClear wglMakeCurrent wglDeleteContext wglCreateContext glTexImage2D glGetString glTexParameteri glViewport glDrawArrays glGetError glStencilFunc wglGetProcAddress wglGetCurrentDC

kernel32

CreateEventW ExitProcess GetCommandLineW GetTempPathW IsDebuggerPresent GlobalUnlock GlobalLock LocalFree SetThreadExecutionState GetComputerNameW GetSystemPowerStatus GetLocaleInfoW GetLocaleInfoEx GetConsoleWindow GetCurrentDirectoryW GetExitCodeProcess CreateProcessW GlobalAlloc GlobalFree GetStdHandle GetConsoleScreenBufferInfo SetConsoleTextAttribute GetDateFormatW FlsFree FlsSetValue FlsGetValue FlsAlloc HeapFree HeapAlloc SystemTimeToFileTime TzSpecificLocalTimeToSystemTime SetFileTime GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread TerminateProcess InitializeCriticalSectionAndSpinCount RtlUnwind SetLastError RtlUnwindEx RtlPcToFileHeader GetStringTypeW GetCPInfo CompareStringEx GetFileInformationByHandleEx SetFileInformationByHandle LCMapStringEx DecodePointer EncodePointer InitializeCriticalSectionEx InitOnceComplete InitOnceBeginInitialize GetTickCount64 AcquireSRWLockShared ReleaseSRWLockShared WakeConditionVariable TryAcquireSRWLockExclusive GetExitCodeThread WaitForSingleObjectEx InitializeSListHead GetCurrentProcessId IsProcessorFeaturePresent GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext SleepConditionVariableSRW WaitForSingleObject AcquireSRWLockExclusive ReleaseSRWLockExclusive InitializeSRWLock FormatMessageA SetEvent TlsSetValue TlsGetValue TlsAlloc GetFileTime GetFileSizeEx GetFileType GetFileAttributesW SetFileAttributesW MoveFileExW SetFilePointerEx SetEndOfFile UnmapViewOfFile MapViewOfFile CreateFileMappingW CreateMutexW ReleaseMutex GetCurrentProcess DuplicateHandle DebugBreak VirtualQuery VirtualFree VirtualProtect VirtualAlloc GetSystemInfo GetLogicalDriveStringsW FindNextFileW FindFirstFileExW FindClose GetLocalTime GetSystemTimeAsFileTime CreateWaitableTimerExW SetWaitableTimer QueryPerformanceFrequency QueryPerformanceCounter FormatMessageW SetConsoleTitleW SetConsoleWindowInfo SetConsoleScreenBufferSize SetConsoleOutputCP SetConsoleCP OutputDebugStringA GetModuleFileNameW CompareStringOrdinal LoadLibraryExW GlobalAddAtomW GlobalDeleteAtom Sleep CloseHandle CreateFileW WriteFile ReadFile GetTickCount GetLastError GetModuleHandleW WideCharToMultiByte LoadLibraryW GetProcAddress FreeLibrary GetTimeFormatW CompareStringW LCMapStringW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetConsoleOutputCP GetConsoleMode HeapReAlloc HeapSize HeapQueryInformation FlushFileBuffers SetConsoleCtrlHandler WriteConsoleW FreeConsole AllocConsole DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection CopyFileW ReleaseSemaphore SetErrorMode ReadConsoleW SetStdHandle GetTimeZoneInformation SetEnvironmentVariableW IsValidCodePage RemoveDirectoryW CreatePipe GetLongPathNameW GetFullPathNameW GetFileAttributesExW DeleteFileW FileTimeToSystemTime SystemTimeToTzSpecificLocalTime GetDriveTypeW AreFileApisANSI GetFileInformationByHandle FindFirstFileW WaitNamedPipeW PeekNamedPipe lstrlenW GetTempFileNameW SetFilePointer MulDiv LoadLibraryExA CreateEventA GetModuleHandleA CreateDirectoryW VerifyVersionInfoW GetNativeSystemInfo VerSetConditionMask GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetCurrentThreadId CreateSemaphoreA GetCurrentThread RaiseException MultiByteToWideChar OutputDebugStringW GetProcessHeap ResetEvent TlsFree GetProcessAffinityMask WakeAllConditionVariable InitializeConditionVariable SleepConditionVariableCS GetLogicalProcessorInformation GetModuleFileNameA GetDiskFreeSpaceExW MapViewOfFileEx RemoveVectoredExceptionHandler AddVectoredExceptionHandler RtlCaptureStackBackTrace

user32

FillRect ClipCursor ShowCursor AdjustWindowRect ReleaseDC GetWindowDC GetSystemMetrics IsIconic SetWindowPlacement GetWindowPlacement SetWindowPos ShowOwnedPopups GetDoubleClickTime PostQuitMessage GetMessageExtraInfo SetParent IsDialogMessageW CreateDialogParamW BringWindowToTop SystemParametersInfoW TrackPopupMenuEx ScreenToClient SetPropW RegisterRawInputDevices GetRawInputData OffsetRect PtInRect MapVirtualKeyW SetCursor GetMenuItemInfoW SetMenuInfo RemoveMenu AppendMenuW GetMenuItemCount GetSubMenu DrawMenuBar PostMessageW IsDlgButtonChecked ClientToScreen SetMenuDefaultItem ModifyMenuW GetDC TrackMouseEvent GetCursorPos SetMenu GetMenu LoadMenuW EmptyClipboard CloseClipboard OpenClipboard SendMessageA GetKeyboardLayout RedrawWindow SendDlgItemMessageW CheckMenuItem wsprintfW MapWindowPoints GetFocus LoadImageW MoveWindow ShowWindow DestroyWindow CreateWindowExW CallWindowProcW GetWindowRect SetCapture EnableMenuItem ReleaseCapture IsWindowVisible DrawIconEx DestroyIcon LoadIconW LoadCursorW GetParent SetWindowLongW GetWindowLongW GetSysColorBrush GetClientRect SetScrollRange InvalidateRect EndPaint BeginPaint UpdateWindow KillTimer SetTimer SetFocus RegisterClassExW DefWindowProcW GetWindowTextA SetWindowTextA EnableWindow MessageBoxW SetWindowLongPtrW GetWindowLongPtrW MessageBoxA GetWindowTextW SetWindowTextW GetDlgItem EndDialog DialogBoxParamW SendMessageW GetMessageW TranslateMessage DispatchMessageW GetClipboardData LoadAcceleratorsW MonitorFromWindow DrawTextExW TranslateAcceleratorW EnumDisplaySettingsW SetClipboardData RegisterClipboardFormatA GetAsyncKeyState GetSystemMenu GetMenuStringA CreatePopupMenu DestroyMenu AppendMenuA ModifyMenuA SetDlgItemTextW GetMonitorInfoW GetWindowTextLengthW GetMenuBarInfo

gdi32

ChoosePixelFormat BitBlt CreateCompatibleBitmap CreateCompatibleDC CreateFontW CreatePen CreateSolidBrush DeleteDC DeleteObject GetTextExtentPoint32W AddFontResourceExW RemoveFontResourceExW SetMapMode CreateDIBSection Rectangle SelectObject SetBkMode SetTextColor LineTo GetDeviceCaps GetStockObject SwapBuffers SetPixelFormat SetTextAlign CreateBrushIndirect SetBkColor GetBkColor TextOutW TextOutA MoveToEx

comdlg32

GetOpenFileNameW GetSaveFileNameW

shell32

SHCreateItemFromParsingName ShellExecuteW SHGetFolderPathW DragFinish SHParseDisplayName SHOpenFolderAndSelectItems ord155 DragQueryFileW CommandLineToArgvW ShellExecuteA DragAcceptFiles

ole32

CoUninitialize StringFromGUID2 CoCreateInstance CoSetProxyBlanket CoTaskMemFree CoInitializeEx PropVariantClear CoTaskMemAlloc

oleaut32

VariantInit SysAllocString SysFreeString VariantClear

ws2_32

shutdown send __WSAFDIsSet closesocket connect ioctlsocket getsockopt htons ntohl WSAPoll getsockname ntohs recvfrom inet_addr getnameinfo getpeername bind inet_pton htonl WSAIoctl WSAAddressToStringW listen accept recv select inet_ntop freeaddrinfo getaddrinfo WSAGetLastError WSACleanup WSAStartup gethostname socket setsockopt sendto WSASendMsg

dinput8

DirectInput8Create

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeA

imm32

ImmSetCandidateWindow ImmSetCompositionWindow ImmReleaseContext ImmGetContext

winhttp

WinHttpConnect WinHttpWriteData WinHttpCloseHandle WinHttpSetTimeouts WinHttpOpenRequest WinHttpAddRequestHeaders WinHttpOpen WinHttpSetStatusCallback WinHttpQueryDataAvailable WinHttpReadData WinHttpSendRequest WinHttpReceiveResponse WinHttpQueryHeaders WinHttpCrackUrl

winmm

timeGetDevCaps timeEndPeriod timeBeginPeriod

advapi32

RegSetValueExW CryptAcquireContextW RegQueryValueExW RegOpenKeyExW RegCreateKeyExW RegCloseKey GetSecurityInfo CryptAcquireContextA CryptGenRandom CryptReleaseContext

iphlpapi

GetBestInterfaceEx GetAdaptersAddresses

dbghelp

SymInitialize SymGetLineFromAddr64 SymSetOptions SymFromAddr

d2d1

ord1

dwrite

DWriteCreateFactory

d3d11

D3D11CreateDevice

Name

.text

Size

14.0MB

Virtual Size

14.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4.0MB

Virtual Size

4.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

509KB

Virtual Size

6.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

467KB

Virtual Size

467KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rodata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

197KB

Virtual Size

196KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

134KB

Virtual Size

133KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

680KB

Virtual Size

684KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-16_39424c39188f49f9daee381e45e8609f_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

avrt

dwmapi

uxtheme

shlwapi

comctl32

setupapi

hid

opengl32

kernel32

user32

gdi32

comdlg32

shell32

ole32

oleaut32

ws2_32

dinput8

version

imm32

winhttp

winmm

advapi32

iphlpapi

dbghelp

d2d1

dwrite

d3d11

generic