General
- Target 2026-08-04_7616c309dacb9161ce6be621ebf4914f_aspxspy_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig
- Size 1.9MB
- Sample260804-sqv6ss1tft
- SHA256 ef6168d27312cd67c1715e4a2952da81db569bb2841b911c3702d3d948673df2
- MD5 7616c309dacb9161ce6be621ebf4914f
- SHA1 cfd6d954efac1b455f81a0af070551ed49fa9a7f
- SHA512 e8b868abcf99d158cd1d00c9408ff0fc6021dd18b9ccfea9dd477cdfd60943c0db073e718828a3f8e3e1468a1ea912616bcd24967c13c39fc40be7576f973050
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUJ8Y9cuu:00GnJMOWPClFdx6e0EALKWVTffZiPAcZ
- TLSH T12295BF6D725081F9E6ABD038C91A480FE7F534A9536495EB0AA457DD2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_7616c309dacb9161ce6be621ebf4914f_aspxspy_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_7616c309dacb9161ce6be621ebf4914f_aspxspy_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig
- Size 1.9MB
- SHA256 ef6168d27312cd67c1715e4a2952da81db569bb2841b911c3702d3d948673df2
- MD5 7616c309dacb9161ce6be621ebf4914f
- SHA1 cfd6d954efac1b455f81a0af070551ed49fa9a7f
- SHA512 e8b868abcf99d158cd1d00c9408ff0fc6021dd18b9ccfea9dd477cdfd60943c0db073e718828a3f8e3e1468a1ea912616bcd24967c13c39fc40be7576f973050
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUJ8Y9cuu:00GnJMOWPClFdx6e0EALKWVTffZiPAcZ
- TLSH T12295BF6D725081F9E6ABD038C91A480FE7F534A9536495EB0AA457DD2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory