General
- Target 2026-06-28_afffa91b047334c32d1af22018908c52_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 1.9MB
- Sample260628-yjbfpscy7w
- SHA256 21338eee126f72b3900000600e71fdb93f46095c04298e5cdfe77d3f45602b96
- MD5 afffa91b047334c32d1af22018908c52
- SHA1 2aecb02e8cf90948cde44937d004295a12e15f67
- SHA512 eb439670940a1bbbfe18245affc136140684854a4794f72516b5d43fd09aab96384945f3a3b5320fbe5c06edb414fa57defb31bf0f7da328fbaac9da3d96e458
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcmWH8oOEEW:00GnJMOWPClFdx6e0EALKWVTffZiPAcT
- TLSH T14195BF6D725041F9C6AFC178C91B890FF7F13859436495EB12A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-28_afffa91b047334c32d1af22018908c52_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_afffa91b047334c32d1af22018908c52_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win11ltsc2024-20260618-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_afffa91b047334c32d1af22018908c52_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 1.9MB
- SHA256 21338eee126f72b3900000600e71fdb93f46095c04298e5cdfe77d3f45602b96
- MD5 afffa91b047334c32d1af22018908c52
- SHA1 2aecb02e8cf90948cde44937d004295a12e15f67
- SHA512 eb439670940a1bbbfe18245affc136140684854a4794f72516b5d43fd09aab96384945f3a3b5320fbe5c06edb414fa57defb31bf0f7da328fbaac9da3d96e458
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcmWH8oOEEW:00GnJMOWPClFdx6e0EALKWVTffZiPAcT
- TLSH T14195BF6D725041F9C6AFC178C91B890FF7F13859436495EB12A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory