General
- Target 2026-07-02_f4c971a518969c433fac70621b9fb70b_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.0MB
- Sample260702-cfcnpshv3j
- SHA256 61da72bd2b8da7a342a03b0f05d3794470984a857dbf41b6af81c4d0e8b6e239
- MD5 f4c971a518969c433fac70621b9fb70b
- SHA1 47a7c239003e6098e064d855be20efabe080972e
- SHA512 470b49cc04773d3b2301b3e58dafa5838cb2d892fc980608868cb70075bb838ae1466a0f5ce8a9618d6dec0fbe278afc3ba2b33d9fa17bb20ebde339d99db646
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcmWH/AOc:00GnJMOWPClFdx6e0EALKWVTffZiPAcU
- TLSH T1FFA5BF6D625541F9C6AFC038C91B890FF7F13859437495EB12A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-02_f4c971a518969c433fac70621b9fb70b_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_f4c971a518969c433fac70621b9fb70b_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.0MB
- SHA256 61da72bd2b8da7a342a03b0f05d3794470984a857dbf41b6af81c4d0e8b6e239
- MD5 f4c971a518969c433fac70621b9fb70b
- SHA1 47a7c239003e6098e064d855be20efabe080972e
- SHA512 470b49cc04773d3b2301b3e58dafa5838cb2d892fc980608868cb70075bb838ae1466a0f5ce8a9618d6dec0fbe278afc3ba2b33d9fa17bb20ebde339d99db646
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcmWH/AOc:00GnJMOWPClFdx6e0EALKWVTffZiPAcU
- TLSH T1FFA5BF6D625541F9C6AFC038C91B890FF7F13859437495EB12A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory