General
- Target 2026-10-25_c94577d63d65aacd9e13bc490d8219b0_coinminer_glassworm_icedid_luca-stealer_njrat_stealc
- Size 11.0MB
- Sample261026-pp2qeasx5m
- SHA256 7dc09bd85e6921f50743fab8ed5f59b3799f7f12e076a0ee30dd82199d0b1359
- MD5 c94577d63d65aacd9e13bc490d8219b0
- SHA1 090d027b0672d6a0796255c55f7e889a6a40c1d6
- SHA512 dbaeef38efec563ac605b628fdfcdec8d1408e6fb0d55292f377775bffd7b34f4cdce538eb61623c748b2888053a370c018a817fd611e53bf84584caa1597582
- SSDEEP 98304:+Fw9CYtt6ZVcthdPqkZ8YeWBufuNM5fQuuKO4o+jdPH:+Fg7tg+/dykZ8YTBufuNM5fQiOZMN
- TLSH T138C65A6DA86B06A5CDA19DBC817A5293F322B10D1BB14AF376E804F91E139DC5F35E03
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-25_c94577d63d65aacd9e13bc490d8219b0_coinminer_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-25_c94577d63d65aacd9e13bc490d8219b0_coinminer_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-25_c94577d63d65aacd9e13bc490d8219b0_coinminer_glassworm_icedid_luca-stealer_njrat_stealc
- Size 11.0MB
- SHA256 7dc09bd85e6921f50743fab8ed5f59b3799f7f12e076a0ee30dd82199d0b1359
- MD5 c94577d63d65aacd9e13bc490d8219b0
- SHA1 090d027b0672d6a0796255c55f7e889a6a40c1d6
- SHA512 dbaeef38efec563ac605b628fdfcdec8d1408e6fb0d55292f377775bffd7b34f4cdce538eb61623c748b2888053a370c018a817fd611e53bf84584caa1597582
- SSDEEP 98304:+Fw9CYtt6ZVcthdPqkZ8YeWBufuNM5fQuuKO4o+jdPH:+Fg7tg+/dykZ8YTBufuNM5fQiOZMN
- TLSH T138C65A6DA86B06A5CDA19DBC817A5293F322B10D1BB14AF376E804F91E139DC5F35E03
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of NtSetInformationThreadHideFromDebugger
MITRE ATT&CK Enterprise v16
Defense Evasion
Debugger Evasion
1Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1