General
- Target 2026-08-06_94288e06de8b5a29f73db01099cab79c_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.1MB
- Sample260806-nhrfestyev
- SHA256 d74f63ccca401f0f4ed62068d2222350df50f0424e68d863feceed9df98f79c2
- MD5 94288e06de8b5a29f73db01099cab79c
- SHA1 ebaee08f44584aae4a8a50d8883e1c8759b29c47
- SHA512 4849e9ff5c97f2dd813f57f45c504a1cf6014f2004941ffee7f894a73abd7d043c2f65a4ad75a4aac792bacaa5cdb3e78865f3b6c1065d9f1719d269c4f976a5
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUh+hN2:00GnJMOWPClFdx6e0EALKWVTffZiPAc4
- TLSH T1FFA5BF6D725081F9E6AFD038C91A480FE7F534A9536495EB0AA4579D2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-06_94288e06de8b5a29f73db01099cab79c_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_94288e06de8b5a29f73db01099cab79c_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.1MB
- SHA256 d74f63ccca401f0f4ed62068d2222350df50f0424e68d863feceed9df98f79c2
- MD5 94288e06de8b5a29f73db01099cab79c
- SHA1 ebaee08f44584aae4a8a50d8883e1c8759b29c47
- SHA512 4849e9ff5c97f2dd813f57f45c504a1cf6014f2004941ffee7f894a73abd7d043c2f65a4ad75a4aac792bacaa5cdb3e78865f3b6c1065d9f1719d269c4f976a5
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUh+hN2:00GnJMOWPClFdx6e0EALKWVTffZiPAc4
- TLSH T1FFA5BF6D725081F9E6AFD038C91A480FE7F534A9536495EB0AA4579D2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory