General
- Target 2026-05-17_04d95d050241cfd8a3ada5a9ab6223ad_aspxspy_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.3MB
- Sample260517-b665kae18j
- SHA256 03a9789928e09c9c5fa6bc76c47c3161558880c095e8d8e1581912d68a42c66e
- MD5 04d95d050241cfd8a3ada5a9ab6223ad
- SHA1 6e8722f5ab15c55aa26237e5ffc2fa284e22b100
- SHA512 2b8d70676c0735dbadb0e345449440cac7136094c5742c98963991a27da56b6e7c8f27e729b1f52d0806a8631b3216b0ca2f8612595a566c9c41c8cdfc3cffdb
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUjc2HhG82P:00GnJMOWPClFdx6e0EALKWVTffZiPAc7
- TLSH T1EBB5CF6D725081F9E6ABD038C91A480FE7F534A9536495EB0AA457DD2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-17_04d95d050241cfd8a3ada5a9ab6223ad_aspxspy_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-17_04d95d050241cfd8a3ada5a9ab6223ad_aspxspy_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.3MB
- SHA256 03a9789928e09c9c5fa6bc76c47c3161558880c095e8d8e1581912d68a42c66e
- MD5 04d95d050241cfd8a3ada5a9ab6223ad
- SHA1 6e8722f5ab15c55aa26237e5ffc2fa284e22b100
- SHA512 2b8d70676c0735dbadb0e345449440cac7136094c5742c98963991a27da56b6e7c8f27e729b1f52d0806a8631b3216b0ca2f8612595a566c9c41c8cdfc3cffdb
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUjc2HhG82P:00GnJMOWPClFdx6e0EALKWVTffZiPAc7
- TLSH T1EBB5CF6D725081F9E6ABD038C91A480FE7F534A9536495EB0AA457DD2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory