General
- Target 2026-08-08_81a1dcf9dc7b12db8a4675837fe0b669_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.0MB
- Sample260808-lxlsdavamb
- SHA256 b4361b0fa189de878cc9773f53730479137efa87d4787705b74dde31f21ccdd4
- MD5 81a1dcf9dc7b12db8a4675837fe0b669
- SHA1 ecf654f4ea01b0c1b1a875b2423f11db05509a2f
- SHA512 1392ef6097db2eb260ac12b5d7d1b47f16cfaf79e6ac869db4bd3a4e4614ed8cc6630abd39a6a05320b0628998a0fe10b5902a5e67cfc47f39a75908b9967f69
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcmWH/xbsjO+:00GnJMOWPClFdx6e0EALKWVTffZiPAcC
- TLSH T139A5BF6D726141F9C6AFC178C91B890FF7F13859436495EB02A157AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-08_81a1dcf9dc7b12db8a4675837fe0b669_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_81a1dcf9dc7b12db8a4675837fe0b669_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.0MB
- SHA256 b4361b0fa189de878cc9773f53730479137efa87d4787705b74dde31f21ccdd4
- MD5 81a1dcf9dc7b12db8a4675837fe0b669
- SHA1 ecf654f4ea01b0c1b1a875b2423f11db05509a2f
- SHA512 1392ef6097db2eb260ac12b5d7d1b47f16cfaf79e6ac869db4bd3a4e4614ed8cc6630abd39a6a05320b0628998a0fe10b5902a5e67cfc47f39a75908b9967f69
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcmWH/xbsjO+:00GnJMOWPClFdx6e0EALKWVTffZiPAcC
- TLSH T139A5BF6D726141F9C6AFC178C91B890FF7F13859436495EB02A157AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory