General
- Target 2026-08-17_ca61cb7ec5bc3da3e67243c08881ea43_glassworm_icedid_njrat_stealc_vidar_xmrig
- Size 1.9MB
- Sample260817-ps96ysbm8s
- SHA256 66023b2313ed638cca4402bcacf3fedbadf0a4384881e5cde069a4b443564d63
- MD5 ca61cb7ec5bc3da3e67243c08881ea43
- SHA1 d091267b33b8beb98c6d0899b25fb6d52ec101ce
- SHA512 cb33175e0265b233c1b5746dbad947d2f97a24639f9363dc6cf591c30da4595eb22ae221695c3f047c3fbf96cabf7a3531274e05253d14ee9bb61e78a18bb260
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8Dhch516Q+o43KBO4:00GnJMOWPClFdx6e0EALKWVTffZiPAcH
- TLSH T16195BF6D625041F5C6AFC178C91B890FF7F138594374A5EB12A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-17_ca61cb7ec5bc3da3e67243c08881ea43_glassworm_icedid_njrat_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_ca61cb7ec5bc3da3e67243c08881ea43_glassworm_icedid_njrat_stealc_vidar_xmrig
- Size 1.9MB
- SHA256 66023b2313ed638cca4402bcacf3fedbadf0a4384881e5cde069a4b443564d63
- MD5 ca61cb7ec5bc3da3e67243c08881ea43
- SHA1 d091267b33b8beb98c6d0899b25fb6d52ec101ce
- SHA512 cb33175e0265b233c1b5746dbad947d2f97a24639f9363dc6cf591c30da4595eb22ae221695c3f047c3fbf96cabf7a3531274e05253d14ee9bb61e78a18bb260
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8Dhch516Q+o43KBO4:00GnJMOWPClFdx6e0EALKWVTffZiPAcH
- TLSH T16195BF6D625041F5C6AFC178C91B890FF7F138594374A5EB12A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory