General
- Target 2026-07-12_16b9e8bc3683e85c14ffc4fb2dba5abc_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 1.8MB
- Sample260712-rjbcdadv3v
- SHA256 43baed85f42a0ce61090f930b4cb013c3d1bcc8a17168e2292fca41a5f14dd64
- MD5 16b9e8bc3683e85c14ffc4fb2dba5abc
- SHA1 1cc310ff8817dad1dd4349c3cd5828fd5053f0c2
- SHA512 382ab1691f85707a795b1f401d74303c0f1b9e084b258622b96068b23da02b40e0259a9d043bbe911129c1fdde8aa09c142b63464cc35843e5f5145531ba1e99
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcmWH/u:00GnJMOWPClFdx6e0EALKWVTffZiPAcc
- TLSH T17C95AE6D726041F5C6AFC178C91B890FF7F138594364A5EB12A157AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-12_16b9e8bc3683e85c14ffc4fb2dba5abc_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_16b9e8bc3683e85c14ffc4fb2dba5abc_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 1.8MB
- SHA256 43baed85f42a0ce61090f930b4cb013c3d1bcc8a17168e2292fca41a5f14dd64
- MD5 16b9e8bc3683e85c14ffc4fb2dba5abc
- SHA1 1cc310ff8817dad1dd4349c3cd5828fd5053f0c2
- SHA512 382ab1691f85707a795b1f401d74303c0f1b9e084b258622b96068b23da02b40e0259a9d043bbe911129c1fdde8aa09c142b63464cc35843e5f5145531ba1e99
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcmWH/u:00GnJMOWPClFdx6e0EALKWVTffZiPAcc
- TLSH T17C95AE6D726041F5C6AFC178C91B890FF7F138594364A5EB12A157AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory