General
- Target 2026-08-13_c46963ada518e921042711cb423fb991_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.4MB
- Sample260813-pcwcvsx1aw
- SHA256 619c47f84e1cb5389fea41a90ff44977e4975db7d196fdd3055eaf311049209b
- MD5 c46963ada518e921042711cb423fb991
- SHA1 fd9327f5c63ece87277e745b3530d2d9f0a743c4
- SHA512 0f66021eb61255daf0d1461374b4aaed3baeb5ae322539548df3750daba50ed0ee1a7b1dd5c98774685e5a42d3205c9e9b54b80f932a3392831fb0799a29fc81
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcmWH/xW/X1Ic:00GnJMOWPClFdx6e0EALKWVTffZiPAcG
- TLSH T10AC5D06D726441F5C6AFC038C91B894FF7F13859436495EB12A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-13_c46963ada518e921042711cb423fb991_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_c46963ada518e921042711cb423fb991_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.4MB
- SHA256 619c47f84e1cb5389fea41a90ff44977e4975db7d196fdd3055eaf311049209b
- MD5 c46963ada518e921042711cb423fb991
- SHA1 fd9327f5c63ece87277e745b3530d2d9f0a743c4
- SHA512 0f66021eb61255daf0d1461374b4aaed3baeb5ae322539548df3750daba50ed0ee1a7b1dd5c98774685e5a42d3205c9e9b54b80f932a3392831fb0799a29fc81
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcmWH/xW/X1Ic:00GnJMOWPClFdx6e0EALKWVTffZiPAcG
- TLSH T10AC5D06D726441F5C6AFC038C91B894FF7F13859436495EB12A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory