2026-10-25_9e26e74f37454d35b83264420a3767d0_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

General

Target
2026-10-25_9e26e74f37454d35b83264420a3767d0_coinminer_glassworm_icedid_luca-stealer_njrat_stealc
Size 40.3MB
Sample261026-wwp4hsbf73
SHA256 6bb117bdf5eb14e0a2af0a88253502874813b2114fad326d3a6e1a26065cbeaf
MD5 9e26e74f37454d35b83264420a3767d0
SHA1 ff5a28e43957de68a9fc89e30a9b481244385197
SHA512 b19c688ebcf75351c945493bf492711ddd33d7023b81d60355a1356760123d06cf6290877ce8e4999badc9075db2f538508c494da2df759f2f17c8207c0b442b
SSDEEP 98304:OIf5nMxEdhK7TBW1FKd3EHI5tmgiug0EHs7ZaCfwiNf0bkGGdLLLcYt2r0K:OIf5MxEdhKmFLI59GXr0
TLSH
T18597D315FF50E9D7C41A8638CCEBCA55AB71BC609B02878732E6332F1E762D81E79254
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-25_9e26e74f37454d35b83264420a3767d0_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

File Explorer

2026-10-25_9e26e74f37454d35b83264420a3767d0_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

.exe 40.3MB

2026-10-25_9e26e74f37454d35b83264420a3767d0_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

IMPHASH d6af2683b1328160e2c56b39035795b6
SHA256 6bb117bdf5eb14e0a2af0a88253502874813b2114fad326d3a6e1a26065cbeaf
MD5 9e26e74f37454d35b83264420a3767d0
SHA1 ff5a28e43957de68a9fc89e30a9b481244385197
SHA512 b19c688ebcf75351c945493bf492711ddd33d7023b81d60355a1356760123d06cf6290877ce8e4999badc9075db2f538508c494da2df759f2f17c8207c0b442b
SSDEEP 98304:OIf5nMxEdhK7TBW1FKd3EHI5tmgiug0EHs7ZaCfwiNf0bkGGdLLLcYt2r0K:OIf5MxEdhKmFLI59GXr0
TLSH
T18597D315FF50E9D7C41A8638CCEBCA55AB71BC609B02878732E6332F1E762D81E79254
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4262020

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\FuckP2C\Desktop\unpack\garbage\emulator\wt\tags\build\x64\Release\tests\emu-alltest.pdb

kernel32

CloseHandle DuplicateHandle GetLastError AddVectoredExceptionHandler RemoveVectoredExceptionHandler WaitForSingleObject Sleep GetCurrentProcess GetCurrentProcessId SwitchToThread CreateThread GetCurrentThread GetCurrentThreadId SetThreadPriority TerminateThread RtlVirtualUnwind ResumeThread SetPriorityClass GetThreadContext SetThreadContext FlushInstructionCache GetCurrentProcessorNumber GetLogicalProcessorInformationEx VirtualAlloc VirtualFree GetModuleFileNameA GetProcessAffinityMask SetThreadAffinityMask CreateToolhelp32Snapshot Process32FirstW Process32NextW SuspendThread RtlLookupFunctionEntry WriteConsoleW HeapSize GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW QueryPerformanceCounter SetWaitableTimer CreateWaitableTimerA GetSystemInfo InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection OpenThread LocalFree FormatMessageA QueryPerformanceFrequency GetLogicalProcessorInformation GetSystemTime SystemTimeToFileTime VirtualProtect VerSetConditionMask VerifyVersionInfoW GetCurrentDirectoryW CreateDirectoryW CreateFileW FindClose FindFirstFileW FindNextFileW GetFileAttributesW GetFileInformationByHandle GetFileType VirtualQuery CreateFileMappingW MapViewOfFile UnmapViewOfFile GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte GetLocaleInfoEx FindFirstFileExW GetFileAttributesExW AreFileApisANSI GetModuleHandleW GetProcAddress GetFileInformationByHandleEx InitializeCriticalSectionEx GetSystemTimeAsFileTime EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo RtlCaptureContext UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW IsDebuggerPresent GetStartupInfoW InitializeSListHead RtlPcToFileHeader RaiseException RtlUnwindEx SetLastError RtlUnwind InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW ExitThread FreeLibraryAndExitThread SetEndOfFile SetStdHandle GetStdHandle WriteFile GetCommandLineA GetCommandLineW SetFilePointerEx GetConsoleOutputCP GetConsoleMode ReadFile ReadConsoleW HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetFileSizeEx HeapReAlloc IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW

dbghelp

SymSetOptions SymFromAddr SymInitialize SymGetModuleBase64

winmm

timeBeginPeriod

advapi32

SystemFunction036

Name

.text

Size

4.3MB

Virtual Size

4.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

35.4MB

Virtual Size

35.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

124KB

Virtual Size

134KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

144KB

Virtual Size

144KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

359KB

Virtual Size

359KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-25_9e26e74f37454d35b83264420a3767d0_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

kernel32

dbghelp

winmm

advapi32

generic