2026-10-26_bb43159d04715fbdd5ded6fbe6d9684c_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

General

Target
2026-10-26_bb43159d04715fbdd5ded6fbe6d9684c_coinminer_glassworm_icedid_luca-stealer_njrat_stealc
Size 40.4MB
Sample261027-j24smsda66
SHA256 3f1d28b7762cdae5e53c2b3ef1e9b4612fbcfd4fb9483c89d683cd4799418b6d
MD5 bb43159d04715fbdd5ded6fbe6d9684c
SHA1 bd1bed818bacac73edcf73851b19a663fce2d12d
SHA512 6137c88ff1d733deebe163ac903590d55e7616b68806a9df38dd1a987a16b6a5d0a65201956443362bfa8af2e5a0aa8f31e076ec80ff43661e93de6178d9e415
SSDEEP 98304:KWVv9tmDxEdxKZguQSI7/95xqas7ysRNHMaVCDvAPRjkc4nRYtcB0:KWVlt6xEdxKDIzx9rrB0
TLSH
T1EB97B305BF14C9D7C91A46388CABCA69A771BC54CB13DB8732D2332F1E772E52E69250
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-26_bb43159d04715fbdd5ded6fbe6d9684c_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

File Explorer

2026-10-26_bb43159d04715fbdd5ded6fbe6d9684c_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

.exe 40.4MB

2026-10-26_bb43159d04715fbdd5ded6fbe6d9684c_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

IMPHASH d6af2683b1328160e2c56b39035795b6
SHA256 3f1d28b7762cdae5e53c2b3ef1e9b4612fbcfd4fb9483c89d683cd4799418b6d
MD5 bb43159d04715fbdd5ded6fbe6d9684c
SHA1 bd1bed818bacac73edcf73851b19a663fce2d12d
SHA512 6137c88ff1d733deebe163ac903590d55e7616b68806a9df38dd1a987a16b6a5d0a65201956443362bfa8af2e5a0aa8f31e076ec80ff43661e93de6178d9e415
SSDEEP 98304:KWVv9tmDxEdxKZguQSI7/95xqas7ysRNHMaVCDvAPRjkc4nRYtcB0:KWVlt6xEdxKDIzx9rrB0
TLSH
T1EB97B305BF14C9D7C91A46388CABCA69A771BC54CB13DB8732D2332F1E772E52E69250
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4319764

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\FuckP2C\Desktop\unpack\garbage\emulator\wt\recheck31\build\x64\Release\tests\emu-alltest.pdb

kernel32

CloseHandle DuplicateHandle GetLastError AddVectoredExceptionHandler RemoveVectoredExceptionHandler WaitForSingleObject Sleep GetCurrentProcess GetCurrentProcessId SwitchToThread CreateThread GetCurrentThread GetCurrentThreadId SetThreadPriority TerminateThread RtlVirtualUnwind ResumeThread SetPriorityClass GetThreadContext SetThreadContext FlushInstructionCache GetCurrentProcessorNumber GetLogicalProcessorInformationEx VirtualAlloc VirtualFree GetModuleFileNameA GetProcessAffinityMask SetThreadAffinityMask CreateToolhelp32Snapshot Process32FirstW Process32NextW SuspendThread RtlLookupFunctionEntry WriteConsoleW HeapSize GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW QueryPerformanceCounter SetWaitableTimer CreateWaitableTimerA GetSystemInfo InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection OpenThread LocalFree FormatMessageA QueryPerformanceFrequency GetLogicalProcessorInformation GetSystemTime SystemTimeToFileTime VirtualProtect VerSetConditionMask VerifyVersionInfoW GetCurrentDirectoryW CreateDirectoryW CreateFileW FindClose FindFirstFileW FindNextFileW GetFileAttributesW GetFileInformationByHandle GetFileType VirtualQuery CreateFileMappingW MapViewOfFile UnmapViewOfFile GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte GetLocaleInfoEx FindFirstFileExW GetFileAttributesExW AreFileApisANSI GetModuleHandleW GetProcAddress GetFileInformationByHandleEx InitializeCriticalSectionEx GetSystemTimeAsFileTime EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo RtlCaptureContext UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW IsDebuggerPresent GetStartupInfoW InitializeSListHead RtlPcToFileHeader RaiseException RtlUnwindEx SetLastError RtlUnwind InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW ExitThread FreeLibraryAndExitThread SetEndOfFile SetStdHandle GetStdHandle WriteFile GetCommandLineA GetCommandLineW SetFilePointerEx GetConsoleOutputCP GetConsoleMode ReadFile ReadConsoleW HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetFileSizeEx HeapReAlloc IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW

dbghelp

SymSetOptions SymFromAddr SymInitialize SymGetModuleBase64

winmm

timeBeginPeriod

advapi32

SystemFunction036

Name

.text

Size

4.3MB

Virtual Size

4.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

35.4MB

Virtual Size

35.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

124KB

Virtual Size

134KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

146KB

Virtual Size

145KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

359KB

Virtual Size

359KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-26_bb43159d04715fbdd5ded6fbe6d9684c_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

kernel32

dbghelp

winmm

advapi32

generic