General
- Target 2026-08-07_0c376e207945bc4296d106463d1297bc_ezcob_glassworm_icedid_njrat_stealc_vidar_xmrig
- Size 1.9MB
- Sample260807-mfmtsawva1
- SHA256 68b683416b2d3b8a891ac04b54229a5af3e5caa105dcd538ec51927974c6c7d1
- MD5 0c376e207945bc4296d106463d1297bc
- SHA1 be06c7c5e179075629c7ce397a7ae77610531359
- SHA512 0cfea0f28dfe862986ed6f0c6b6a889531f2f11799cbc515c9fd3919a9dfcbdb62c2a16fd1f8c4941e253f0c7c13099ac6528983502875ae1acc8c1935315d27
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhcuJPHj9:00GnJMOWPClFdx6e0EALKWVTffZiPAcM
- TLSH T16195AE6D725141F5C6AFC178C91B890FF7F138594364A5EB02A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-07_0c376e207945bc4296d106463d1297bc_ezcob_glassworm_icedid_njrat_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_0c376e207945bc4296d106463d1297bc_ezcob_glassworm_icedid_njrat_stealc_vidar_xmrig
- Size 1.9MB
- SHA256 68b683416b2d3b8a891ac04b54229a5af3e5caa105dcd538ec51927974c6c7d1
- MD5 0c376e207945bc4296d106463d1297bc
- SHA1 be06c7c5e179075629c7ce397a7ae77610531359
- SHA512 0cfea0f28dfe862986ed6f0c6b6a889531f2f11799cbc515c9fd3919a9dfcbdb62c2a16fd1f8c4941e253f0c7c13099ac6528983502875ae1acc8c1935315d27
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhcuJPHj9:00GnJMOWPClFdx6e0EALKWVTffZiPAcM
- TLSH T16195AE6D725141F5C6AFC178C91B890FF7F138594364A5EB02A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory