General
- Target 2026-07-07_b48e14dd810dbd48ff0070028cff6262_aspxspy_ezcob_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.6MB
- Sample260707-l29d8sft3s
- SHA256 bcb0f01f8b3e1d10b1b61a7620c52c560fb657296cc66c8c76e1f27fca79f417
- MD5 b48e14dd810dbd48ff0070028cff6262
- SHA1 a4aa35dfe6469705cb63a11344668fec76cad646
- SHA512 bb39d26088d8e35a8cea4bc3e575a64824b7a88352078147d9031b1cf31c2979ce1499ad66e3a810f4b9adf50c6c411516ae422a4f0558238dde2652e046b6f0
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcmWH/xbnb/bA:00GnJMOWPClFdx6e0EALKWVTffZiPAcg
- TLSH T1CAC5D06D726141F9C6AFC178C91B890FF7F13859436495EB12A1679A2F237C0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-07_b48e14dd810dbd48ff0070028cff6262_aspxspy_ezcob_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_b48e14dd810dbd48ff0070028cff6262_aspxspy_ezcob_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.6MB
- SHA256 bcb0f01f8b3e1d10b1b61a7620c52c560fb657296cc66c8c76e1f27fca79f417
- MD5 b48e14dd810dbd48ff0070028cff6262
- SHA1 a4aa35dfe6469705cb63a11344668fec76cad646
- SHA512 bb39d26088d8e35a8cea4bc3e575a64824b7a88352078147d9031b1cf31c2979ce1499ad66e3a810f4b9adf50c6c411516ae422a4f0558238dde2652e046b6f0
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcmWH/xbnb/bA:00GnJMOWPClFdx6e0EALKWVTffZiPAcg
- TLSH T1CAC5D06D726141F9C6AFC178C91B890FF7F13859436495EB12A1679A2F237C0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory