General
- Target 2026-08-12_a913c6c52bca736b6fe413ec64a72af9_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.2MB
- Sample260812-11btxafa83
- SHA256 26ff998c3ae10eb834744ede19cdde24dd954cb4d1261f146cff5de06c6a0d4f
- MD5 a913c6c52bca736b6fe413ec64a72af9
- SHA1 9330211a76168a177c59ce87cb84481c5e793637
- SHA512 d33ba21cb6eab501d2fa5e4841304ae98f3ff4348b2a46ec58b35f8e2f1ad26c93e9b6b18acb67a9bd92833fb4479c1c292905cbb0be75b33f400ec9c7aa7a67
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUh+hN/M:00GnJMOWPClFdx6e0EALKWVTffZiPAcm
- TLSH T19FB5BF6D725481F9E6ABD038C81A480FE7F534A9536495EB0AA457DD2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-12_a913c6c52bca736b6fe413ec64a72af9_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_a913c6c52bca736b6fe413ec64a72af9_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.2MB
- SHA256 26ff998c3ae10eb834744ede19cdde24dd954cb4d1261f146cff5de06c6a0d4f
- MD5 a913c6c52bca736b6fe413ec64a72af9
- SHA1 9330211a76168a177c59ce87cb84481c5e793637
- SHA512 d33ba21cb6eab501d2fa5e4841304ae98f3ff4348b2a46ec58b35f8e2f1ad26c93e9b6b18acb67a9bd92833fb4479c1c292905cbb0be75b33f400ec9c7aa7a67
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUh+hN/M:00GnJMOWPClFdx6e0EALKWVTffZiPAcm
- TLSH T19FB5BF6D725481F9E6ABD038C81A480FE7F534A9536495EB0AA457DD2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory