General
- Target 2026-08-02_0bcf96dc3fe13bca0c04d3f8c1862ab6_aspxspy_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig
- Size 2.2MB
- Sample260802-persfshg95
- SHA256 a77053820012917f7e48715b337a44d94b352a363ecb8b82caa77d935a3930b8
- MD5 0bcf96dc3fe13bca0c04d3f8c1862ab6
- SHA1 d5765de093085b356591a666fb50eb0e227acee1
- SHA512 58846877191fb37ba181331720e31f361cdf037dcb58826aa064cbed7e3df3b486f186fe547ebf4755b6147806a76a0ac0f7d3ae0d07e76f956080d705aee090
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcq4nPBu3gBOp:00GnJMOWPClFdx6e0EALKWVTffZiPAck
- TLSH T1BCB5C06D625441F9C6AFC178C91B890FF7F13849436495EB12A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-02_0bcf96dc3fe13bca0c04d3f8c1862ab6_aspxspy_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_0bcf96dc3fe13bca0c04d3f8c1862ab6_aspxspy_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig
- Size 2.2MB
- SHA256 a77053820012917f7e48715b337a44d94b352a363ecb8b82caa77d935a3930b8
- MD5 0bcf96dc3fe13bca0c04d3f8c1862ab6
- SHA1 d5765de093085b356591a666fb50eb0e227acee1
- SHA512 58846877191fb37ba181331720e31f361cdf037dcb58826aa064cbed7e3df3b486f186fe547ebf4755b6147806a76a0ac0f7d3ae0d07e76f956080d705aee090
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcq4nPBu3gBOp:00GnJMOWPClFdx6e0EALKWVTffZiPAck
- TLSH T1BCB5C06D625441F9C6AFC178C91B890FF7F13849436495EB12A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory