General
- Target 2026-05-25_79481eda9e828e3e6e7c0f9b9c8337e9_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.4MB
- Sample260525-scd1csby5l
- SHA256 edf6ea0835897ab9cd9d59debe78d1fab466935187fa59dd967b8f8f2725be5c
- MD5 79481eda9e828e3e6e7c0f9b9c8337e9
- SHA1 6b5c08ff35cbe7a6bc56f2b4df0919030b67a4a4
- SHA512 0076ff178542792997b4554394e5b49f1f2e55974ac2648a0a5a81da8cd87855e8d8f11934d7b1d24071914b240013a1809d615eebca3276a4acbbb3a150f05a
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUrMNjrae:00GnJMOWPClFdx6e0EALKWVTffZiPAcx
- TLSH T123C5CF6DB25181F9D6ABD038C81A480FE7F538A9536495EB0AA457DD2F237C0C93BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-25_79481eda9e828e3e6e7c0f9b9c8337e9_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-25_79481eda9e828e3e6e7c0f9b9c8337e9_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-25_79481eda9e828e3e6e7c0f9b9c8337e9_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.4MB
- SHA256 edf6ea0835897ab9cd9d59debe78d1fab466935187fa59dd967b8f8f2725be5c
- MD5 79481eda9e828e3e6e7c0f9b9c8337e9
- SHA1 6b5c08ff35cbe7a6bc56f2b4df0919030b67a4a4
- SHA512 0076ff178542792997b4554394e5b49f1f2e55974ac2648a0a5a81da8cd87855e8d8f11934d7b1d24071914b240013a1809d615eebca3276a4acbbb3a150f05a
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUrMNjrae:00GnJMOWPClFdx6e0EALKWVTffZiPAcx
- TLSH T123C5CF6DB25181F9D6ABD038C81A480FE7F538A9536495EB0AA457DD2F237C0C93BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory