General
- Target 2026-08-05_efe322b0e2e6c6991fe2308a9cdcce09_aspxspy_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.6MB
- Sample260805-lpskysdk9w
- SHA256 6640dc5dce9c29e4f3bc5822cd9dbeff1ee270e1cb3c19b8f77cdfb38ae12718
- MD5 efe322b0e2e6c6991fe2308a9cdcce09
- SHA1 bceddef7b6126785fc8c7d4a1a8b4f9a81bda19c
- SHA512 05f4639464579ce507bd8ae5262c61c5d67631140e92071ed82c0bc16f0736c9f32f71d3b09e5542bf17c7ea9a688058d4b206acdfd4cf202643c7d529a74dc8
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUjc2HhG82Diym:00GnJMOWPClFdx6e0EALKWVTffZiPAc0
- TLSH T1BCC5CF2D725481F9E6AFD038C91A480FE7F538A9536495EB0AA4579D2F137D0CA3BF20
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-05_efe322b0e2e6c6991fe2308a9cdcce09_aspxspy_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_efe322b0e2e6c6991fe2308a9cdcce09_aspxspy_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.6MB
- SHA256 6640dc5dce9c29e4f3bc5822cd9dbeff1ee270e1cb3c19b8f77cdfb38ae12718
- MD5 efe322b0e2e6c6991fe2308a9cdcce09
- SHA1 bceddef7b6126785fc8c7d4a1a8b4f9a81bda19c
- SHA512 05f4639464579ce507bd8ae5262c61c5d67631140e92071ed82c0bc16f0736c9f32f71d3b09e5542bf17c7ea9a688058d4b206acdfd4cf202643c7d529a74dc8
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUjc2HhG82Diym:00GnJMOWPClFdx6e0EALKWVTffZiPAc0
- TLSH T1BCC5CF2D725481F9E6AFD038C91A480FE7F538A9536495EB0AA4579D2F137D0CA3BF20
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory