General
- Target 2026-08-07_c2077f64453a9f56e38f4945ba4b0eda_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.2MB
- Sample260807-lwchbasbqe
- SHA256 2470a0be56b976b73c6d4b70550304a859795cdc750b8bcdcf63f01590066a85
- MD5 c2077f64453a9f56e38f4945ba4b0eda
- SHA1 6b8ce316750d581b4241b588dbeca729212fc1b6
- SHA512 a4a95cba8c7ef50d12dd8ed129516406def2b8c9432a91bb2e9dcec80a01767bd8623404458aebc45216a57255ede8d8bcdd88fe0d1ac58c1c4664b95cadf080
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcmWH/xbFizy7:00GnJMOWPClFdx6e0EALKWVTffZiPAcX
- TLSH T19EB5CF6D725441F5C6AFC178C91B894FF7F138494364A5EB12A167AA2F237C0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-07_c2077f64453a9f56e38f4945ba4b0eda_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_c2077f64453a9f56e38f4945ba4b0eda_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.2MB
- SHA256 2470a0be56b976b73c6d4b70550304a859795cdc750b8bcdcf63f01590066a85
- MD5 c2077f64453a9f56e38f4945ba4b0eda
- SHA1 6b8ce316750d581b4241b588dbeca729212fc1b6
- SHA512 a4a95cba8c7ef50d12dd8ed129516406def2b8c9432a91bb2e9dcec80a01767bd8623404458aebc45216a57255ede8d8bcdd88fe0d1ac58c1c4664b95cadf080
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcmWH/xbFizy7:00GnJMOWPClFdx6e0EALKWVTffZiPAcX
- TLSH T19EB5CF6D725441F5C6AFC178C91B894FF7F138494364A5EB12A167AA2F237C0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory