General
- Target 2026-08-15_fe3c5fd30abc7b65f9ed93e30e073ecd_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.6MB
- Sample260815-hsstcagk7t
- SHA256 1687afec67632e14c2a7288b167b0e7280c6004e99ddde5c63906476f6611a17
- MD5 fe3c5fd30abc7b65f9ed93e30e073ecd
- SHA1 6a5183c16375d389bd52838e4a9406c85904c9ae
- SHA512 20bc407722cdf6fbe1bcaa7bdf09f43dfcd079bb8278d855e457fee43922d60100e207336e303fefd610a844b065141e00c77dd54b829a4f4f937a718ea590f3
- SSDEEP 49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8Dze7jcHhEWdspHf:N0GnJMOWPClFdx6e0EALKWVTffZiPAcw
- TLSH T1A5C5CF6D729141F5C6AFC078C91B890FF7F13899436495EB12A157AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-15_fe3c5fd30abc7b65f9ed93e30e073ecd_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_fe3c5fd30abc7b65f9ed93e30e073ecd_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.6MB
- SHA256 1687afec67632e14c2a7288b167b0e7280c6004e99ddde5c63906476f6611a17
- MD5 fe3c5fd30abc7b65f9ed93e30e073ecd
- SHA1 6a5183c16375d389bd52838e4a9406c85904c9ae
- SHA512 20bc407722cdf6fbe1bcaa7bdf09f43dfcd079bb8278d855e457fee43922d60100e207336e303fefd610a844b065141e00c77dd54b829a4f4f937a718ea590f3
- SSDEEP 49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8Dze7jcHhEWdspHf:N0GnJMOWPClFdx6e0EALKWVTffZiPAcw
- TLSH T1A5C5CF6D729141F5C6AFC078C91B890FF7F13899436495EB12A157AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory