General
- Target 2026-07-02_1bcb752daa56fc6676bed36e2c1e69e6_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.0MB
- Sample260702-cpw4psa19s
- SHA256 b6584062592afd103bc6a81fededd6d0cbb3a02639a079247df9db8e2532e2bc
- MD5 1bcb752daa56fc6676bed36e2c1e69e6
- SHA1 cb9259a0009ec2fcdc2499d1fd788c48cc0bccb0
- SHA512 e1ef49660ab826603bd35c81d64d5d6fd676faaad6ac1543ed1aec7e514d18a3d8fed7de9b3b1b7c42f0b27e122b1427a9b01e2b9a12f3e9c0880ef744c572e1
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcmWH/AOZ:00GnJMOWPClFdx6e0EALKWVTffZiPAcB
- TLSH T1C8A5BF6D625541F9C6AFC038C91B890FF7F13859437495EB12A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-02_1bcb752daa56fc6676bed36e2c1e69e6_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_1bcb752daa56fc6676bed36e2c1e69e6_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.0MB
- SHA256 b6584062592afd103bc6a81fededd6d0cbb3a02639a079247df9db8e2532e2bc
- MD5 1bcb752daa56fc6676bed36e2c1e69e6
- SHA1 cb9259a0009ec2fcdc2499d1fd788c48cc0bccb0
- SHA512 e1ef49660ab826603bd35c81d64d5d6fd676faaad6ac1543ed1aec7e514d18a3d8fed7de9b3b1b7c42f0b27e122b1427a9b01e2b9a12f3e9c0880ef744c572e1
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcmWH/AOZ:00GnJMOWPClFdx6e0EALKWVTffZiPAcB
- TLSH T1C8A5BF6D625541F9C6AFC038C91B890FF7F13859437495EB12A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory