2026-10-22_83f86f55c2a0351dc2b7b1163b2fe6d4_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

General

Target
2026-10-22_83f86f55c2a0351dc2b7b1163b2fe6d4_coinminer_glassworm_icedid_luca-stealer_njrat_stealc
Size 40.3MB
Sample261024-g7flwsed66
SHA256 926e55298b460fbc2820652c6a0a91026e95fcb10d99a4660b967dad07438817
MD5 83f86f55c2a0351dc2b7b1163b2fe6d4
SHA1 11d624233313bb03712e8aaab79101965a0fcedd
SHA512 e7a55b183769a8adb0b11cff27f2d0e4314141c299a00f60e40961d6e9495861a047ef8892713b3564b9cb25be9bd4718daf9177c403329520e57a16984c4706
SSDEEP 98304:Y2U1B0xEduaHaNajCa9UlJoiG9pGgCOgzkHsbZaifwCNPkKRpSZCqflLxpUsMTnl:Yt16xEduaMqUwH1ZNlfUsMT7im00
TLSH
T16897F605FF94D993D41A4A38CCABC255AB72BC504B62878B32E6373F5E733C40E69256
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_83f86f55c2a0351dc2b7b1163b2fe6d4_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

File Explorer

2026-10-22_83f86f55c2a0351dc2b7b1163b2fe6d4_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

.exe 40.3MB

2026-10-22_83f86f55c2a0351dc2b7b1163b2fe6d4_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

IMPHASH 9e563c2987b8b52ca35f8e9a2dbb9a81
SHA256 926e55298b460fbc2820652c6a0a91026e95fcb10d99a4660b967dad07438817
MD5 83f86f55c2a0351dc2b7b1163b2fe6d4
SHA1 11d624233313bb03712e8aaab79101965a0fcedd
SHA512 e7a55b183769a8adb0b11cff27f2d0e4314141c299a00f60e40961d6e9495861a047ef8892713b3564b9cb25be9bd4718daf9177c403329520e57a16984c4706
SSDEEP 98304:Y2U1B0xEduaHaNajCa9UlJoiG9pGgCOgzkHsbZaifwCNPkKRpSZCqflLxpUsMTnl:Yt16xEduaMqUwH1ZNlfUsMT7im00
TLSH
T16897F605FF94D993D41A4A38CCABC255AB72BC504B62878B32E6373F5E733C40E69256
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4227748

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\FuckP2C\Desktop\unpack\garbage\emulator\NoVmp\build\x64\Release\tests\emu-alltest.pdb

kernel32

CloseHandle DuplicateHandle AddVectoredExceptionHandler RemoveVectoredExceptionHandler WaitForSingleObject Sleep GetCurrentProcess GetCurrentProcessId SwitchToThread CreateThread GetCurrentThread GetCurrentThreadId SetThreadPriority RtlVirtualUnwind ResumeThread SetPriorityClass GetThreadContext FlushInstructionCache GetCurrentProcessorNumber GetLogicalProcessorInformationEx VirtualAlloc VirtualFree GetModuleFileNameA GetProcessAffinityMask SetThreadAffinityMask CreateToolhelp32Snapshot Process32FirstW Process32NextW SuspendThread RtlLookupFunctionEntry WriteConsoleW HeapSize GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW QueryPerformanceCounter SetWaitableTimer CreateWaitableTimerA GetLastError GetSystemInfo InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection OpenThread LocalFree FormatMessageA QueryPerformanceFrequency GetLogicalProcessorInformation GetSystemTime SystemTimeToFileTime VirtualProtect VerSetConditionMask VerifyVersionInfoW GetCurrentDirectoryW CreateDirectoryW CreateFileW FindClose FindFirstFileW FindNextFileW GetFileAttributesW GetFileInformationByHandle GetFileType VirtualQuery CreateFileMappingW MapViewOfFile UnmapViewOfFile GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte GetLocaleInfoEx FindFirstFileExW GetFileAttributesExW AreFileApisANSI GetModuleHandleW GetProcAddress GetFileInformationByHandleEx InitializeCriticalSectionEx GetSystemTimeAsFileTime EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo RtlCaptureContext UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW IsDebuggerPresent GetStartupInfoW InitializeSListHead RtlPcToFileHeader RaiseException RtlUnwindEx SetLastError RtlUnwind InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW ExitThread FreeLibraryAndExitThread SetEndOfFile SetStdHandle GetStdHandle WriteFile GetCommandLineA GetCommandLineW SetFilePointerEx GetConsoleOutputCP GetConsoleMode ReadFile ReadConsoleW HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetFileSizeEx HeapReAlloc IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW

dbghelp

SymSetOptions SymFromAddr SymInitialize SymGetModuleBase64

winmm

timeBeginPeriod

advapi32

SystemFunction036

Name

.text

Size

4.2MB

Virtual Size

4.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

35.4MB

Virtual Size

35.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

123KB

Virtual Size

134KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

143KB

Virtual Size

143KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

359KB

Virtual Size

359KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_83f86f55c2a0351dc2b7b1163b2fe6d4_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

kernel32

dbghelp

winmm

advapi32

generic