General
- Target 2026-08-15_64f80becbb39abfc78a31eb35e77b3a6_ezcob_glassworm_icedid_njrat_stealc_vidar_xmrig
- Size 1.8MB
- Sample260815-jftqjsgn9v
- SHA256 011969075e60bfd4b5c0cc03621ec9140d2560aaea44270a10e1add4d7c25220
- MD5 64f80becbb39abfc78a31eb35e77b3a6
- SHA1 293aa43fb24ed8f213913db69b2fc5cb8e5afbc5
- SHA512 0fe462c434f1eff499eca0a20397e922ac026e53cd9eb04034edf78445dace8dd52af63bb5a16dad472b95906a987a4e6025ce1281ef303c0ec822ecd627408a
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhcuJe2C:00GnJMOWPClFdx6e0EALKWVTffZiPAc9
- TLSH T11F85AE6D625041F5C6AFC178C91B890FF7F138594374A5EB12A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-15_64f80becbb39abfc78a31eb35e77b3a6_ezcob_glassworm_icedid_njrat_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_64f80becbb39abfc78a31eb35e77b3a6_ezcob_glassworm_icedid_njrat_stealc_vidar_xmrig.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_64f80becbb39abfc78a31eb35e77b3a6_ezcob_glassworm_icedid_njrat_stealc_vidar_xmrig
- Size 1.8MB
- SHA256 011969075e60bfd4b5c0cc03621ec9140d2560aaea44270a10e1add4d7c25220
- MD5 64f80becbb39abfc78a31eb35e77b3a6
- SHA1 293aa43fb24ed8f213913db69b2fc5cb8e5afbc5
- SHA512 0fe462c434f1eff499eca0a20397e922ac026e53cd9eb04034edf78445dace8dd52af63bb5a16dad472b95906a987a4e6025ce1281ef303c0ec822ecd627408a
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhcuJe2C:00GnJMOWPClFdx6e0EALKWVTffZiPAc9
- TLSH T11F85AE6D625041F5C6AFC178C91B890FF7F138594374A5EB12A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory