General
- Target 2026-08-02_5a1f2f01060aecc80fa1fa1e8e1f2366_aspxspy_glassworm_icedid_njrat_stealc_vidar_xmrig
- Size 2.5MB
- Sample260802-dm1jsacl6s
- SHA256 ef567be9f9b6971b84471b74a1842619119613d7ebb32b07fe48429cfc1f1d20
- MD5 5a1f2f01060aecc80fa1fa1e8e1f2366
- SHA1 f0ea53a75d8bf80b826fdc11d51e747635d52723
- SHA512 88ae6a274a4a51d19c9200f357eeb8f21e2a7a6b42a14d3f575d21ba19ca722a59520d1e30d7e54af71a0d8a8dfd1e40ede735a4557520f18e05b51e01893b4b
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8Dhch516Q+oxxcdBDI:00GnJMOWPClFdx6e0EALKWVTffZiPAcR
- TLSH T11CC5D06D725141F9C6AFC178C91B890FF7F138594364D5EB12A167AA2F237C08A3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-02_5a1f2f01060aecc80fa1fa1e8e1f2366_aspxspy_glassworm_icedid_njrat_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_5a1f2f01060aecc80fa1fa1e8e1f2366_aspxspy_glassworm_icedid_njrat_stealc_vidar_xmrig
- Size 2.5MB
- SHA256 ef567be9f9b6971b84471b74a1842619119613d7ebb32b07fe48429cfc1f1d20
- MD5 5a1f2f01060aecc80fa1fa1e8e1f2366
- SHA1 f0ea53a75d8bf80b826fdc11d51e747635d52723
- SHA512 88ae6a274a4a51d19c9200f357eeb8f21e2a7a6b42a14d3f575d21ba19ca722a59520d1e30d7e54af71a0d8a8dfd1e40ede735a4557520f18e05b51e01893b4b
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8Dhch516Q+oxxcdBDI:00GnJMOWPClFdx6e0EALKWVTffZiPAcR
- TLSH T11CC5D06D725141F9C6AFC178C91B890FF7F138594364D5EB12A167AA2F237C08A3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory