General
- Target 2026-07-29_fd8dccadc1e1c4d4e7a98589cba35045_aspxspy_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig
- Size 2.1MB
- Sample260729-mdbcza1flg
- SHA256 ef6d5faefc5c91b4aa75fc15f2aa59bdf60aa3bb778885a12a3cbdd1870fab4e
- MD5 fd8dccadc1e1c4d4e7a98589cba35045
- SHA1 4203f67cf3c938ecfa54aeea4b5dca8a306896ed
- SHA512 6f8c46808c747d2f41673d7d3ee7560d1522740fd45dd98489994d46aa0db7c19bf881f17b10320dbcd29a48b4b2b3efe3cc72e85367a29b7ddf83d910ebf469
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcq4nPBuRMEKN:00GnJMOWPClFdx6e0EALKWVTffZiPAcP
- TLSH T158A5CF6D725041F9C6AFC178C91B890FF7F138594364A5EB12A1679A2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-29_fd8dccadc1e1c4d4e7a98589cba35045_aspxspy_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_fd8dccadc1e1c4d4e7a98589cba35045_aspxspy_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig
- Size 2.1MB
- SHA256 ef6d5faefc5c91b4aa75fc15f2aa59bdf60aa3bb778885a12a3cbdd1870fab4e
- MD5 fd8dccadc1e1c4d4e7a98589cba35045
- SHA1 4203f67cf3c938ecfa54aeea4b5dca8a306896ed
- SHA512 6f8c46808c747d2f41673d7d3ee7560d1522740fd45dd98489994d46aa0db7c19bf881f17b10320dbcd29a48b4b2b3efe3cc72e85367a29b7ddf83d910ebf469
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcq4nPBuRMEKN:00GnJMOWPClFdx6e0EALKWVTffZiPAcP
- TLSH T158A5CF6D725041F9C6AFC178C91B890FF7F138594364A5EB12A1679A2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory