General
- Target 2026-08-15_23ad7201d3766c35bbbd9cf5f18d5656_aspxspy_ezcob_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.3MB
- Sample260815-jrljbasxg1
- SHA256 0737ed8502c574d292a70571388879dca3acad797346318a41c0699a986be0d6
- MD5 23ad7201d3766c35bbbd9cf5f18d5656
- SHA1 c58ea1e4d1fa770e7936615e941b1de133e04302
- SHA512 1252a3e1ad065d8de45d2679e376ea52d4d252f6f699bc5d32443c4bd2cba0ce332a4202b555e79867a91ef286733dd038fd2de7d9861ea6078803e8241be3d4
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcmWH/xbnb/ua:00GnJMOWPClFdx6e0EALKWVTffZiPAcr
- TLSH T1BAB5C06D726041F9C6AFC178C91B890FF7F138594364A5EB12A1579A2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-15_23ad7201d3766c35bbbd9cf5f18d5656_aspxspy_ezcob_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_23ad7201d3766c35bbbd9cf5f18d5656_aspxspy_ezcob_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.3MB
- SHA256 0737ed8502c574d292a70571388879dca3acad797346318a41c0699a986be0d6
- MD5 23ad7201d3766c35bbbd9cf5f18d5656
- SHA1 c58ea1e4d1fa770e7936615e941b1de133e04302
- SHA512 1252a3e1ad065d8de45d2679e376ea52d4d252f6f699bc5d32443c4bd2cba0ce332a4202b555e79867a91ef286733dd038fd2de7d9861ea6078803e8241be3d4
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcmWH/xbnb/ua:00GnJMOWPClFdx6e0EALKWVTffZiPAcr
- TLSH T1BAB5C06D726041F9C6AFC178C91B890FF7F138594364A5EB12A1579A2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory