General
- Target 2026-07-18_2f3ea742bde6a099e87d8485f78dd266_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 1.8MB
- Sample260718-kc1v5ady7q
- SHA256 20ab0e8632fdb9996073ae34dd4850ea4f47f75f21c688465992285827c064ad
- MD5 2f3ea742bde6a099e87d8485f78dd266
- SHA1 6f689e3542f5a419c780789daa40ba72b95041dc
- SHA512 d1e4ac3fd2c731ccc254f66ef6f59319f781ebb220e60b33c972d3ffea406eb4e85c8487fc07d80ec024548da03d4bc1bf0bda4b53bcfc9ee7f38411b1c1243d
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcmWHgp:00GnJMOWPClFdx6e0EALKWVTffZiPAci
- TLSH T13D95BF6D726141F5C6AFC178C91B890FF7F13859436495EB02A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-18_2f3ea742bde6a099e87d8485f78dd266_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_2f3ea742bde6a099e87d8485f78dd266_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 1.8MB
- SHA256 20ab0e8632fdb9996073ae34dd4850ea4f47f75f21c688465992285827c064ad
- MD5 2f3ea742bde6a099e87d8485f78dd266
- SHA1 6f689e3542f5a419c780789daa40ba72b95041dc
- SHA512 d1e4ac3fd2c731ccc254f66ef6f59319f781ebb220e60b33c972d3ffea406eb4e85c8487fc07d80ec024548da03d4bc1bf0bda4b53bcfc9ee7f38411b1c1243d
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcmWHgp:00GnJMOWPClFdx6e0EALKWVTffZiPAci
- TLSH T13D95BF6D726141F5C6AFC178C91B890FF7F13859436495EB02A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
XMRig Miner payload
Executes dropped EXE
Drops file in System32 directory