General
- Target 2026-08-15_add414d4871325a9cf814c1ddbdb96ed_aspxspy_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig
- Size 2.2MB
- Sample260815-h567hastht
- SHA256 09775f43946d6d6a4a5a189a8ae8c96d7f315e5278751771205f66fce96173dc
- MD5 add414d4871325a9cf814c1ddbdb96ed
- SHA1 1ccae1e3fff7de7540dea1a0637dcd0d0025f3a9
- SHA512 0f224e230a09f018e721b99b777c0e0b7f4323c4c8b1e4d5be2988bc44e0932463ccd5360045abdebbc37bfbd037cdf8c4be7f6830a78e52616c2f1fa89fbdc7
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcq4nPBu3gBOX:00GnJMOWPClFdx6e0EALKWVTffZiPAc2
- TLSH T1F0B5C06D725441F9C6AFC178C91B890FF7F13849436495EB12A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-15_add414d4871325a9cf814c1ddbdb96ed_aspxspy_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_add414d4871325a9cf814c1ddbdb96ed_aspxspy_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig
- Size 2.2MB
- SHA256 09775f43946d6d6a4a5a189a8ae8c96d7f315e5278751771205f66fce96173dc
- MD5 add414d4871325a9cf814c1ddbdb96ed
- SHA1 1ccae1e3fff7de7540dea1a0637dcd0d0025f3a9
- SHA512 0f224e230a09f018e721b99b777c0e0b7f4323c4c8b1e4d5be2988bc44e0932463ccd5360045abdebbc37bfbd037cdf8c4be7f6830a78e52616c2f1fa89fbdc7
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcq4nPBu3gBOX:00GnJMOWPClFdx6e0EALKWVTffZiPAc2
- TLSH T1F0B5C06D725441F9C6AFC178C91B890FF7F13849436495EB12A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory