General
- Target 2026-07-15_f9c074ff6ef7d149f4f15e2c1675ffb4_aspxspy_ezcob_glassworm_icedid_njrat_stealc_vidar_xmrig
- Size 2.5MB
- Sample260715-el8pfabs2l
- SHA256 35b66d9a00f7a58bde88a69a2862895f222e3d9148275491af88cc3f4366598e
- MD5 f9c074ff6ef7d149f4f15e2c1675ffb4
- SHA1 ed037ea2ea959bfa498f07b8b4121abab053c79e
- SHA512 8e03796ed3f1ba03113688882f79626303052d6129dc2627030eb0985e501262e61835a25714f563b420fa20c39b7ce06b71b8c0b3126a2f97375b96bea017c9
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcquVoVJjDNO9:00GnJMOWPClFdx6e0EALKWVTffZiPAch
- TLSH T1BBC5D06D725441F9C6AFC178C91B890FF7F138494364E5EB12A157AA2F237D08A3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-15_f9c074ff6ef7d149f4f15e2c1675ffb4_aspxspy_ezcob_glassworm_icedid_njrat_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_f9c074ff6ef7d149f4f15e2c1675ffb4_aspxspy_ezcob_glassworm_icedid_njrat_stealc_vidar_xmrig
- Size 2.5MB
- SHA256 35b66d9a00f7a58bde88a69a2862895f222e3d9148275491af88cc3f4366598e
- MD5 f9c074ff6ef7d149f4f15e2c1675ffb4
- SHA1 ed037ea2ea959bfa498f07b8b4121abab053c79e
- SHA512 8e03796ed3f1ba03113688882f79626303052d6129dc2627030eb0985e501262e61835a25714f563b420fa20c39b7ce06b71b8c0b3126a2f97375b96bea017c9
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcquVoVJjDNO9:00GnJMOWPClFdx6e0EALKWVTffZiPAch
- TLSH T1BBC5D06D725441F9C6AFC178C91B890FF7F138494364E5EB12A157AA2F237D08A3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory