General
- Target 2026-08-17_ae98b9fd1f82bb2d9531b6080b523805_aspxspy_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig
- Size 2.5MB
- Sample260817-pzfwpazhrb
- SHA256 6a3966d9a6fc8fb200dcaff82014ed33aed9b50aa76631cebf95e986e948b8f6
- MD5 ae98b9fd1f82bb2d9531b6080b523805
- SHA1 9fa14125b8fd4309771bd3c17a6cddcf7fcf6e7c
- SHA512 aa4e89b11fdb578ee9bf2cb54af4bdbd0d4dba98e65af4c2c17f3a4ccfb53059f3d23ea1ca9a5ff06b85371d8b3e94a957882104c646a336e7be8028d6e7c52b
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcq4nPg/H9exE:00GnJMOWPClFdx6e0EALKWVTffZiPAc4
- TLSH T1CCC5D06D725441F9C6AFC178C91B890FF7F13849436495EB12A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-17_ae98b9fd1f82bb2d9531b6080b523805_aspxspy_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_ae98b9fd1f82bb2d9531b6080b523805_aspxspy_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig
- Size 2.5MB
- SHA256 6a3966d9a6fc8fb200dcaff82014ed33aed9b50aa76631cebf95e986e948b8f6
- MD5 ae98b9fd1f82bb2d9531b6080b523805
- SHA1 9fa14125b8fd4309771bd3c17a6cddcf7fcf6e7c
- SHA512 aa4e89b11fdb578ee9bf2cb54af4bdbd0d4dba98e65af4c2c17f3a4ccfb53059f3d23ea1ca9a5ff06b85371d8b3e94a957882104c646a336e7be8028d6e7c52b
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcq4nPg/H9exE:00GnJMOWPClFdx6e0EALKWVTffZiPAc4
- TLSH T1CCC5D06D725441F9C6AFC178C91B890FF7F13849436495EB12A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory