General
- Target 2026-08-19_d3f6937f63f7ccf66522c156baf5b14c_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.7MB
- Sample260819-mxejqsscpg
- SHA256 c90cbc9cc35fe35aa461c0e2414bf3ad331a93bed6cd4de2d5f06bb11f008276
- MD5 d3f6937f63f7ccf66522c156baf5b14c
- SHA1 2639b10f811cea13d4371dc72178d55455cc5e85
- SHA512 374b2b4f3cc4b1b12ab025213cf58441eb596605293183327ae0f8cd0188fd3427441d437d548b08004a718358b348a4ed8318b48eaae4cda498e386a9b6c35a
- SSDEEP 49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzHUrjikF8:N0GnJMOWPClFdx6e0EALKWVTffZiPAcz
- TLSH T188D5BF6D725081F9E6ABD038C81A480EE7F534E9536495EB1AA457DD2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-19_d3f6937f63f7ccf66522c156baf5b14c_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_d3f6937f63f7ccf66522c156baf5b14c_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.7MB
- SHA256 c90cbc9cc35fe35aa461c0e2414bf3ad331a93bed6cd4de2d5f06bb11f008276
- MD5 d3f6937f63f7ccf66522c156baf5b14c
- SHA1 2639b10f811cea13d4371dc72178d55455cc5e85
- SHA512 374b2b4f3cc4b1b12ab025213cf58441eb596605293183327ae0f8cd0188fd3427441d437d548b08004a718358b348a4ed8318b48eaae4cda498e386a9b6c35a
- SSDEEP 49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzHUrjikF8:N0GnJMOWPClFdx6e0EALKWVTffZiPAcz
- TLSH T188D5BF6D725081F9E6ABD038C81A480EE7F534E9536495EB1AA457DD2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory