General
- Target 2026-08-13_98045c9623957cac92f21996498d3ce6_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.4MB
- Sample260813-przntsyxev
- SHA256 1c749016e9e5e03698cbb55ad3a6fe3e0044b95ede704a3194b9d850df61d8ea
- MD5 98045c9623957cac92f21996498d3ce6
- SHA1 6f17c11f670bedbd8d76b4e8a366f1ba04cf1cff
- SHA512 4c2f9f4564062c80b13be546045a37e054bb062f5b50230bf712363eb29e0139290ab1ac08badb9cd4b9f3fbd6243185887fe9fa4c2ca0292848b9bc53339076
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcmWH/xW/X1IX:00GnJMOWPClFdx6e0EALKWVTffZiPAcV
- TLSH T18FC5D06D726441F5C6AFC038C91B894FF7F13859436495EB12A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-13_98045c9623957cac92f21996498d3ce6_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_98045c9623957cac92f21996498d3ce6_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_98045c9623957cac92f21996498d3ce6_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.4MB
- SHA256 1c749016e9e5e03698cbb55ad3a6fe3e0044b95ede704a3194b9d850df61d8ea
- MD5 98045c9623957cac92f21996498d3ce6
- SHA1 6f17c11f670bedbd8d76b4e8a366f1ba04cf1cff
- SHA512 4c2f9f4564062c80b13be546045a37e054bb062f5b50230bf712363eb29e0139290ab1ac08badb9cd4b9f3fbd6243185887fe9fa4c2ca0292848b9bc53339076
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcmWH/xW/X1IX:00GnJMOWPClFdx6e0EALKWVTffZiPAcV
- TLSH T18FC5D06D726441F5C6AFC038C91B894FF7F13859436495EB12A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory