General
- Target 2026-07-31_0f2ea25b6ac3a888fb71b151a54d1d1b_aspxspy_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig
- Size 2.5MB
- Sample260731-plw1rattcs
- SHA256 49cce151443a97aa69787073acec0d8e2142f27420b10d1706aa65e5ca7f00e8
- MD5 0f2ea25b6ac3a888fb71b151a54d1d1b
- SHA1 6dd1f229be2616a79476e337bec4c9b59842795d
- SHA512 239ec7893ec2672a4fea61c247974dd79af15efbef79e89420910296cecf99bf6156ce2a123b367cb566e96967a805a7a76083a787b0507890a136059c514d70
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcq4nPg/H9exO:00GnJMOWPClFdx6e0EALKWVTffZiPAci
- TLSH T1E9C5D06D725441F9C6AFC178C91B890FF7F13849436495EB12A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-31_0f2ea25b6ac3a888fb71b151a54d1d1b_aspxspy_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_0f2ea25b6ac3a888fb71b151a54d1d1b_aspxspy_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig
- Size 2.5MB
- SHA256 49cce151443a97aa69787073acec0d8e2142f27420b10d1706aa65e5ca7f00e8
- MD5 0f2ea25b6ac3a888fb71b151a54d1d1b
- SHA1 6dd1f229be2616a79476e337bec4c9b59842795d
- SHA512 239ec7893ec2672a4fea61c247974dd79af15efbef79e89420910296cecf99bf6156ce2a123b367cb566e96967a805a7a76083a787b0507890a136059c514d70
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcq4nPg/H9exO:00GnJMOWPClFdx6e0EALKWVTffZiPAci
- TLSH T1E9C5D06D725441F9C6AFC178C91B890FF7F13849436495EB12A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory