General
- Target 2026-07-11_1509206c09b9727d9a5b9f7e0d5d2e1b_aspxspy_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig
- Size 1.9MB
- Sample260711-ne55eaa13x
- SHA256 f6b8403c677bf960e49d0132421a2c893a5de111835d0aea615505375a2ac138
- MD5 1509206c09b9727d9a5b9f7e0d5d2e1b
- SHA1 2f8f43d44980c7e27a2a5c1f8ff1d3031d8856bf
- SHA512 c6c75598402d48822166736e902a1a1f38495f039167678666782c908d9466a87b818c2894ebf0854e6232afb099b6b97665bd99a09169b16c53b5fa6e5d99b9
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcq4h2:00GnJMOWPClFdx6e0EALKWVTffZiPAci
- TLSH T18595BF6D725041F5C6AFC178C91B890FF7F138594364A5EB12A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-11_1509206c09b9727d9a5b9f7e0d5d2e1b_aspxspy_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_1509206c09b9727d9a5b9f7e0d5d2e1b_aspxspy_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig
- Size 1.9MB
- SHA256 f6b8403c677bf960e49d0132421a2c893a5de111835d0aea615505375a2ac138
- MD5 1509206c09b9727d9a5b9f7e0d5d2e1b
- SHA1 2f8f43d44980c7e27a2a5c1f8ff1d3031d8856bf
- SHA512 c6c75598402d48822166736e902a1a1f38495f039167678666782c908d9466a87b818c2894ebf0854e6232afb099b6b97665bd99a09169b16c53b5fa6e5d99b9
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcq4h2:00GnJMOWPClFdx6e0EALKWVTffZiPAci
- TLSH T18595BF6D725041F5C6AFC178C91B890FF7F138594364A5EB12A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory