General
- Target 2026-08-06_c0aba904a99ad7c32a32c0ee79a601f0_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.1MB
- Sample260806-nbd7hszare
- SHA256 000cdc79f665abe9eaa9434f6e9da35334082838dc16a125c983e4c2639ad315
- MD5 c0aba904a99ad7c32a32c0ee79a601f0
- SHA1 2551daff88705d50402a84017e097cd48b016a69
- SHA512 86de7e4e391fda1b93bd2435d86b3dc9d14fc5ca97bac66c60eecef3699bf5e34c83ef35f2086b48ac8aa86fcc8d3a926c38b88aeed1379025a038a403197276
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUh+hNA:00GnJMOWPClFdx6e0EALKWVTffZiPAcS
- TLSH T122A5BF6D725081F9E6AFD038C91A480FE7F534A9536495EB0AA4579D2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-06_c0aba904a99ad7c32a32c0ee79a601f0_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_c0aba904a99ad7c32a32c0ee79a601f0_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_c0aba904a99ad7c32a32c0ee79a601f0_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.1MB
- SHA256 000cdc79f665abe9eaa9434f6e9da35334082838dc16a125c983e4c2639ad315
- MD5 c0aba904a99ad7c32a32c0ee79a601f0
- SHA1 2551daff88705d50402a84017e097cd48b016a69
- SHA512 86de7e4e391fda1b93bd2435d86b3dc9d14fc5ca97bac66c60eecef3699bf5e34c83ef35f2086b48ac8aa86fcc8d3a926c38b88aeed1379025a038a403197276
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUh+hNA:00GnJMOWPClFdx6e0EALKWVTffZiPAcS
- TLSH T122A5BF6D725081F9E6AFD038C91A480FE7F534A9536495EB0AA4579D2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory