General
- Target 2026-07-28_1847177b83a05882126882100c727911_ezcob_glassworm_icedid_njrat_stealc_vidar_xmrig
- Size 1.7MB
- Sample260728-tpgsfscl8w
- SHA256 b78bbfc99b6ae8ccb7081fff5b89b72079d2f18c40240ec00cf8ef11851ea89b
- MD5 1847177b83a05882126882100c727911
- SHA1 5a659ca3c22f275559c9c6e1ccaa1f94deae026a
- SHA512 68f5d628b3f1be21fc15465ca7f44a7a6b8604961fe580344fc3a74b87b3ab4415b12314bf103e36e61d2d7382d23de9ad961943a3f3f3bc89a18a7af8cbaae0
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhcuJew:00GnJMOWPClFdx6e0EALKWVTffZiPAc8
- TLSH T14C859E6D725141F5C6AFC178C91B890FF7F138594364A5EB12A167AA2F237C0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-28_1847177b83a05882126882100c727911_ezcob_glassworm_icedid_njrat_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_1847177b83a05882126882100c727911_ezcob_glassworm_icedid_njrat_stealc_vidar_xmrig.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_1847177b83a05882126882100c727911_ezcob_glassworm_icedid_njrat_stealc_vidar_xmrig
- Size 1.7MB
- SHA256 b78bbfc99b6ae8ccb7081fff5b89b72079d2f18c40240ec00cf8ef11851ea89b
- MD5 1847177b83a05882126882100c727911
- SHA1 5a659ca3c22f275559c9c6e1ccaa1f94deae026a
- SHA512 68f5d628b3f1be21fc15465ca7f44a7a6b8604961fe580344fc3a74b87b3ab4415b12314bf103e36e61d2d7382d23de9ad961943a3f3f3bc89a18a7af8cbaae0
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhcuJew:00GnJMOWPClFdx6e0EALKWVTffZiPAc8
- TLSH T14C859E6D725141F5C6AFC178C91B890FF7F138594364A5EB12A167AA2F237C0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory