General
- Target 2026-08-17_c7fb3160f8459fd611e0c6959c88dc48_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 1.9MB
- Sample260817-pttwcs1waw
- SHA256 aa43ff4b7d0f78fb162f36fdf0a2da88ae041d2504c65615f4879e2f9ad63ee7
- MD5 c7fb3160f8459fd611e0c6959c88dc48
- SHA1 1a07151e3426cde0cff1053955570ab68d1a7064
- SHA512 2d05ef19e76bdb190ed269b5cbea46bab8394166596b2381b9884b1c907cb14533782452e2c077765da502d71c93cdc376b8d551c7fca977576350576aa912bc
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUrMhkc:00GnJMOWPClFdx6e0EALKWVTffZiPAcf
- TLSH T1CD95AF6D725081F9E6ABD038C91A480FE7F534A9536495EB0AA457DE2F237C0C93BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-17_c7fb3160f8459fd611e0c6959c88dc48_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_c7fb3160f8459fd611e0c6959c88dc48_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 1.9MB
- SHA256 aa43ff4b7d0f78fb162f36fdf0a2da88ae041d2504c65615f4879e2f9ad63ee7
- MD5 c7fb3160f8459fd611e0c6959c88dc48
- SHA1 1a07151e3426cde0cff1053955570ab68d1a7064
- SHA512 2d05ef19e76bdb190ed269b5cbea46bab8394166596b2381b9884b1c907cb14533782452e2c077765da502d71c93cdc376b8d551c7fca977576350576aa912bc
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUrMhkc:00GnJMOWPClFdx6e0EALKWVTffZiPAcf
- TLSH T1CD95AF6D725081F9E6ABD038C91A480FE7F534A9536495EB0AA457DE2F237C0C93BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory