General
- Target 2026-07-31_2e61bffb9cc5a08b5cc9fb9fe8521e6c_aspxspy_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig
- Size 2.5MB
- Sample260731-pc65csab98
- SHA256 eec67bc4677b65c8ea675f482f5cc04f59bd504c7b459a13bd82c7a816e293b7
- MD5 2e61bffb9cc5a08b5cc9fb9fe8521e6c
- SHA1 1b00377ebb1660be25a986554ec4ddb2c4422c0e
- SHA512 9565fe707bf4bcca85e635d84db4bab2ec8dee92a671e557071f5e15ce29727f30229713314b77fbb22f43390683ea62efec3df019d5c4fd307c9b76c3d2a85c
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcq4nPg/H9ex+:00GnJMOWPClFdx6e0EALKWVTffZiPAcq
- TLSH T183C5D06D725441F9C6AFC178C91B890FF7F13849436495EB12A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-31_2e61bffb9cc5a08b5cc9fb9fe8521e6c_aspxspy_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_2e61bffb9cc5a08b5cc9fb9fe8521e6c_aspxspy_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig
- Size 2.5MB
- SHA256 eec67bc4677b65c8ea675f482f5cc04f59bd504c7b459a13bd82c7a816e293b7
- MD5 2e61bffb9cc5a08b5cc9fb9fe8521e6c
- SHA1 1b00377ebb1660be25a986554ec4ddb2c4422c0e
- SHA512 9565fe707bf4bcca85e635d84db4bab2ec8dee92a671e557071f5e15ce29727f30229713314b77fbb22f43390683ea62efec3df019d5c4fd307c9b76c3d2a85c
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcq4nPg/H9ex+:00GnJMOWPClFdx6e0EALKWVTffZiPAcq
- TLSH T183C5D06D725441F9C6AFC178C91B890FF7F13849436495EB12A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory