General
- Target 2026-08-13_9ff7cda3abcb8c00346f25f066cb5594_aspxspy_ezcob_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.3MB
- Sample260813-ppm71szclf
- SHA256 cdf6f835c2deb5a801b8ed5f6d6bf014a33fd1a9af3955465654761b2d922259
- MD5 9ff7cda3abcb8c00346f25f066cb5594
- SHA1 a211b7b00275a44ed2e6ef26d9d16243df935c3a
- SHA512 8999a84e044350344c27f4bee154033c0843f1c9936437476620af4c66e7b89b7f29547957f0c2040f8ba3a70a9299860314355c08b9b31ffaacc3007fc446a0
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcmWH/xbnb/bd:00GnJMOWPClFdx6e0EALKWVTffZiPAc9
- TLSH T1E9B5C06D726141F9C6AFC078C91B890FF7F13859436495EB12A157AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-13_9ff7cda3abcb8c00346f25f066cb5594_aspxspy_ezcob_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_9ff7cda3abcb8c00346f25f066cb5594_aspxspy_ezcob_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.3MB
- SHA256 cdf6f835c2deb5a801b8ed5f6d6bf014a33fd1a9af3955465654761b2d922259
- MD5 9ff7cda3abcb8c00346f25f066cb5594
- SHA1 a211b7b00275a44ed2e6ef26d9d16243df935c3a
- SHA512 8999a84e044350344c27f4bee154033c0843f1c9936437476620af4c66e7b89b7f29547957f0c2040f8ba3a70a9299860314355c08b9b31ffaacc3007fc446a0
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcmWH/xbnb/bd:00GnJMOWPClFdx6e0EALKWVTffZiPAc9
- TLSH T1E9B5C06D726141F9C6AFC078C91B890FF7F13859436495EB12A157AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory