General
- Target 2026-05-28_8b4fb160a9274d2f112e0fbc1bd104ab_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.0MB
- Sample260528-sq76csd16x
- SHA256 0aef13bafdd1f330dec7abf50a1fb9fe8465a6e092c6f1328201610cc5f6761f
- MD5 8b4fb160a9274d2f112e0fbc1bd104ab
- SHA1 6653ff68fa650a3ac14306e79ff5aaf0564a302c
- SHA512 65a5b9deb11b679f249757eb62eb2cfe4f0fd6116d9cd1cad8a3df5a99aa65f6259f08430cce6a804083e0d6f9ef73eef7e6a7c6e825bd04f3e603ba93118660
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcmWH/xbRx:00GnJMOWPClFdx6e0EALKWVTffZiPAcj
- TLSH T14095BF6D726141F5C6AFC178C91B890FF7F138594364A5EB02A157AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-28_8b4fb160a9274d2f112e0fbc1bd104ab_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-28_8b4fb160a9274d2f112e0fbc1bd104ab_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.0MB
- SHA256 0aef13bafdd1f330dec7abf50a1fb9fe8465a6e092c6f1328201610cc5f6761f
- MD5 8b4fb160a9274d2f112e0fbc1bd104ab
- SHA1 6653ff68fa650a3ac14306e79ff5aaf0564a302c
- SHA512 65a5b9deb11b679f249757eb62eb2cfe4f0fd6116d9cd1cad8a3df5a99aa65f6259f08430cce6a804083e0d6f9ef73eef7e6a7c6e825bd04f3e603ba93118660
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcmWH/xbRx:00GnJMOWPClFdx6e0EALKWVTffZiPAcj
- TLSH T14095BF6D726141F5C6AFC178C91B890FF7F138594364A5EB02A157AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory