General
- Target 2026-08-02_ef12fd94db090b4226c8d0a4f589e9a4_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.2MB
- Sample260802-mhwvga1alg
- SHA256 e2b51513375ac0826265423c57cf90f61169bd8eaa9d23a2bdda0cf98782797a
- MD5 ef12fd94db090b4226c8d0a4f589e9a4
- SHA1 9bcd5d950ee1283da31dfd368cb92a76e08e4db2
- SHA512 30ea028cf901d6875f0913f5f91196245595a11fdee8e8da1d31347d06f52c72b9768451d9254194fc5f54ae007f61d8462cf2bbca57f376ed065986cbb6199d
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUh+hNZxw2:00GnJMOWPClFdx6e0EALKWVTffZiPAcJ
- TLSH T1FFB5BF6D725081F9E6AFD038C91A480FE7F534A9536495EB0AA4579E2F137C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-02_ef12fd94db090b4226c8d0a4f589e9a4_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_ef12fd94db090b4226c8d0a4f589e9a4_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.2MB
- SHA256 e2b51513375ac0826265423c57cf90f61169bd8eaa9d23a2bdda0cf98782797a
- MD5 ef12fd94db090b4226c8d0a4f589e9a4
- SHA1 9bcd5d950ee1283da31dfd368cb92a76e08e4db2
- SHA512 30ea028cf901d6875f0913f5f91196245595a11fdee8e8da1d31347d06f52c72b9768451d9254194fc5f54ae007f61d8462cf2bbca57f376ed065986cbb6199d
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUh+hNZxw2:00GnJMOWPClFdx6e0EALKWVTffZiPAcJ
- TLSH T1FFB5BF6D725081F9E6AFD038C91A480FE7F534A9536495EB0AA4579E2F137C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory