General
- Target 2026-07-12_2511d9d4423fbe35392ecfce2c26e8a4_glassworm_icedid_njrat_stealc_vidar_xmrig
- Size 2.5MB
- Sample260712-raba1sds5x
- SHA256 0349c42551e4bead6b0e1e0cd49df422c79e564258cb85c103c170373355c480
- MD5 2511d9d4423fbe35392ecfce2c26e8a4
- SHA1 bb97a6d97c8806c07f7df331fb3f6074aaba4570
- SHA512 bf7abc6fce4b23fa2b222314023a4cf635fa7feff5370da71acaa6ace3e07a880d74979ba174ea360c759c32e7a80ab0cf251bfdb49220b5af0c0a84aef19657
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8Dh+2/ngDY7T9VzsXU:00GnJMOWPClFdx6e0EALKWVTffZiPAcO
- TLSH T148C5D06D725441F9C6AFC138C91B890FF7F138594364A5EB12A157AA2F277D0CA3AF20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-12_2511d9d4423fbe35392ecfce2c26e8a4_glassworm_icedid_njrat_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_2511d9d4423fbe35392ecfce2c26e8a4_glassworm_icedid_njrat_stealc_vidar_xmrig.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_2511d9d4423fbe35392ecfce2c26e8a4_glassworm_icedid_njrat_stealc_vidar_xmrig
- Size 2.5MB
- SHA256 0349c42551e4bead6b0e1e0cd49df422c79e564258cb85c103c170373355c480
- MD5 2511d9d4423fbe35392ecfce2c26e8a4
- SHA1 bb97a6d97c8806c07f7df331fb3f6074aaba4570
- SHA512 bf7abc6fce4b23fa2b222314023a4cf635fa7feff5370da71acaa6ace3e07a880d74979ba174ea360c759c32e7a80ab0cf251bfdb49220b5af0c0a84aef19657
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8Dh+2/ngDY7T9VzsXU:00GnJMOWPClFdx6e0EALKWVTffZiPAcO
- TLSH T148C5D06D725441F9C6AFC138C91B890FF7F138594364A5EB12A157AA2F277D0CA3AF20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory