General
- Target 2026-08-17_c3fa66d3cf5a49c46d9051d99306999d_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.2MB
- Sample260817-pvfp5abe78
- SHA256 e350b180ef101f5d894dcf5413b910a6d0cbbfe8c5a9caedc379a63092c855e8
- MD5 c3fa66d3cf5a49c46d9051d99306999d
- SHA1 6d11492fb5b0bb3ae70c621df62a76be65c3af6a
- SHA512 dc4842b40604d57e63bdb13fece14dfbfa7ab7f0402391952345172d0de744c7805eaade54c83b776312525e55efb444b7fcbb71f38cc193b4835e98c76ebe85
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUh+hNkoc:00GnJMOWPClFdx6e0EALKWVTffZiPAcI
- TLSH T151B5BF6D725481F9E6AFD038C81A480FE7F534A9536495EB0AA4579D2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-17_c3fa66d3cf5a49c46d9051d99306999d_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_c3fa66d3cf5a49c46d9051d99306999d_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_c3fa66d3cf5a49c46d9051d99306999d_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.2MB
- SHA256 e350b180ef101f5d894dcf5413b910a6d0cbbfe8c5a9caedc379a63092c855e8
- MD5 c3fa66d3cf5a49c46d9051d99306999d
- SHA1 6d11492fb5b0bb3ae70c621df62a76be65c3af6a
- SHA512 dc4842b40604d57e63bdb13fece14dfbfa7ab7f0402391952345172d0de744c7805eaade54c83b776312525e55efb444b7fcbb71f38cc193b4835e98c76ebe85
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUh+hNkoc:00GnJMOWPClFdx6e0EALKWVTffZiPAcI
- TLSH T151B5BF6D725481F9E6AFD038C81A480FE7F534A9536495EB0AA4579D2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory