General
- Target 2026-07-28_dce8ba7215aafd2b0d3b0bc8c19ed011_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.7MB
- Sample260728-yk2dhswvay
- SHA256 8e951ab3ec7a70108cf6d37b0466722297ad95d588f10675f12b72fe41d437fb
- MD5 dce8ba7215aafd2b0d3b0bc8c19ed011
- SHA1 83a024470cc6d6ce113fd3bd454d7a10d53d8cfe
- SHA512 05d4929314c4fcfbaa50f3d9b6e052b8df620c67a5f671a79a504e6b94e3d032167e40294044f7b65d8f8639f617ced0da3c7112bb0ce5a4c0cbd83753505ef0
- SSDEEP 49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzHUrjikFb:N0GnJMOWPClFdx6e0EALKWVTffZiPAc+
- TLSH T145D5BF6D725081F9E6ABD038C81A480EE7F534E9536495EB1AA457DD2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-28_dce8ba7215aafd2b0d3b0bc8c19ed011_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_dce8ba7215aafd2b0d3b0bc8c19ed011_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.7MB
- SHA256 8e951ab3ec7a70108cf6d37b0466722297ad95d588f10675f12b72fe41d437fb
- MD5 dce8ba7215aafd2b0d3b0bc8c19ed011
- SHA1 83a024470cc6d6ce113fd3bd454d7a10d53d8cfe
- SHA512 05d4929314c4fcfbaa50f3d9b6e052b8df620c67a5f671a79a504e6b94e3d032167e40294044f7b65d8f8639f617ced0da3c7112bb0ce5a4c0cbd83753505ef0
- SSDEEP 49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzHUrjikFb:N0GnJMOWPClFdx6e0EALKWVTffZiPAc+
- TLSH T145D5BF6D725081F9E6ABD038C81A480EE7F534E9536495EB1AA457DD2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory