General
- Target 2026-07-21_a5bff6e64754e0d0fc1d68f3d5d1d771_aspxspy_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig
- Size 2.2MB
- Sample260721-vc7zjs1blh
- SHA256 02a2ea58bf19daa1b50154bdc35a8bd3d58facaa1aa43bbe3c6eec4498d6f058
- MD5 a5bff6e64754e0d0fc1d68f3d5d1d771
- SHA1 8ac8018c1b8d57af6ffc3850f849f1d10e91f25c
- SHA512 8d2578fca507bc5bf3623402515efc9e89030ae185ad4d309894f144d1daec04e7715f2e0d11e426af064e1968d784885007a6d7696a3b2b3d88e30bcd8cc488
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcq4nPUEBF:00GnJMOWPClFdx6e0EALKWVTffZiPAc1
- TLSH T197B5CF6D625441F9C6AFC178C91B890FF7F138494364D5EB12A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-21_a5bff6e64754e0d0fc1d68f3d5d1d771_aspxspy_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_a5bff6e64754e0d0fc1d68f3d5d1d771_aspxspy_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig
- Size 2.2MB
- SHA256 02a2ea58bf19daa1b50154bdc35a8bd3d58facaa1aa43bbe3c6eec4498d6f058
- MD5 a5bff6e64754e0d0fc1d68f3d5d1d771
- SHA1 8ac8018c1b8d57af6ffc3850f849f1d10e91f25c
- SHA512 8d2578fca507bc5bf3623402515efc9e89030ae185ad4d309894f144d1daec04e7715f2e0d11e426af064e1968d784885007a6d7696a3b2b3d88e30bcd8cc488
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcq4nPUEBF:00GnJMOWPClFdx6e0EALKWVTffZiPAc1
- TLSH T197B5CF6D625441F9C6AFC178C91B890FF7F138494364D5EB12A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory