General
- Target 2026-10-01_8dce46e7ccac6b501ab10cf02665a85e_coinminer_glassworm_icedid_luca-stealer_njrat_stealc
- Size 8.2MB
- Sample261002-k6lcjaef79
- SHA256 1d5b2584db736fce25002ca6f744f8e9713a87290bb9a847dc0ac6db5839d824
- MD5 8dce46e7ccac6b501ab10cf02665a85e
- SHA1 18d22e2e13e4444b967ea87f25e537f403aaeabf
- SHA512 1cc3679b2c38383264b5deb2d390fb670cad029447638218d5c06d7df22490816c2328b27b611ef91568fc345f761e2d69d1b7e1666133bf7cd5066f61f4a8a9
- SSDEEP 98304:qt2UWkbsi74s1Q2BjotBaNrfII7KDuKc/F+7yE:q+Q38IQ2BjoKNrfII7Yct4
- TLSH T18C86BF6EE6BD00D5D86695BCC2965217F332B01917B047DB6BA845FA0F63AD80F3BB01
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-10-01_8dce46e7ccac6b501ab10cf02665a85e_coinminer_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-01_8dce46e7ccac6b501ab10cf02665a85e_coinminer_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_8dce46e7ccac6b501ab10cf02665a85e_coinminer_glassworm_icedid_luca-stealer_njrat_stealc
- Size 8.2MB
- SHA256 1d5b2584db736fce25002ca6f744f8e9713a87290bb9a847dc0ac6db5839d824
- MD5 8dce46e7ccac6b501ab10cf02665a85e
- SHA1 18d22e2e13e4444b967ea87f25e537f403aaeabf
- SHA512 1cc3679b2c38383264b5deb2d390fb670cad029447638218d5c06d7df22490816c2328b27b611ef91568fc345f761e2d69d1b7e1666133bf7cd5066f61f4a8a9
- SSDEEP 98304:qt2UWkbsi74s1Q2BjotBaNrfII7KDuKc/F+7yE:q+Q38IQ2BjoKNrfII7Yct4
- TLSH T18C86BF6EE6BD00D5D86695BCC2965217F332B01917B047DB6BA845FA0F63AD80F3BB01
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
MITRE ATT&CK Enterprise v16
Defense Evasion
Debugger Evasion
1Modify Registry
1Subvert Trust Controls
2Install Root Certificate
2