General
- Target 2026-06-28_5d7b9723a1144021812af7997fce99b0_aspxspy_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.2MB
- Sample260628-18rkbsft2s
- SHA256 13b2f6f600a72cd85b4a7ed7da7eb3352ee76275dc929bf3c0c5997e27cdc3a0
- MD5 5d7b9723a1144021812af7997fce99b0
- SHA1 295dd27e589809e7c62f45c2f94f077476adb5b3
- SHA512 ebf63c1814c10659e4add87a6d07ec1046bf603eb21034e99a464562441fa0b98676371d72b6362a77957a844292bb35bacbf90dceac9a6d83c233b6fbc8f9f5
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUJ8Y9c87Mezgl1:00GnJMOWPClFdx6e0EALKWVTffZiPAch
- TLSH T1C0B5BF6D725081F9E6ABD038C81A480FE7F534A9536495EB0AA557DD2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-28_5d7b9723a1144021812af7997fce99b0_aspxspy_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_5d7b9723a1144021812af7997fce99b0_aspxspy_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.2MB
- SHA256 13b2f6f600a72cd85b4a7ed7da7eb3352ee76275dc929bf3c0c5997e27cdc3a0
- MD5 5d7b9723a1144021812af7997fce99b0
- SHA1 295dd27e589809e7c62f45c2f94f077476adb5b3
- SHA512 ebf63c1814c10659e4add87a6d07ec1046bf603eb21034e99a464562441fa0b98676371d72b6362a77957a844292bb35bacbf90dceac9a6d83c233b6fbc8f9f5
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUJ8Y9c87Mezgl1:00GnJMOWPClFdx6e0EALKWVTffZiPAch
- TLSH T1C0B5BF6D725081F9E6ABD038C81A480FE7F534A9536495EB0AA557DD2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory