General
- Target 2026-08-19_53a49b3e9e93234d0367bd9d40928a4c_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.7MB
- Sample260819-nrhvmsef78
- SHA256 c576e29567e760f5a0074eb5711dd19c82a448fd6a932c4a4d4d92fda2e56bd5
- MD5 53a49b3e9e93234d0367bd9d40928a4c
- SHA1 cb9e8c2b8f7b7a07d3acc766b44553afc9d0d435
- SHA512 c074e5c3578800c1d33841a177b3eb2bb4e1f2fe67a41d817a18509b0503b6570ab4b783482d0f5a5d46012ec3fac65662dd54d178cabb254551829ca129c998
- SSDEEP 49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzHUrjikFO:N0GnJMOWPClFdx6e0EALKWVTffZiPAcj
- TLSH T16FD5BF6D725081F9E6ABD038C81A480EE7F534E9536495EB1AA457DD2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-19_53a49b3e9e93234d0367bd9d40928a4c_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_53a49b3e9e93234d0367bd9d40928a4c_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.7MB
- SHA256 c576e29567e760f5a0074eb5711dd19c82a448fd6a932c4a4d4d92fda2e56bd5
- MD5 53a49b3e9e93234d0367bd9d40928a4c
- SHA1 cb9e8c2b8f7b7a07d3acc766b44553afc9d0d435
- SHA512 c074e5c3578800c1d33841a177b3eb2bb4e1f2fe67a41d817a18509b0503b6570ab4b783482d0f5a5d46012ec3fac65662dd54d178cabb254551829ca129c998
- SSDEEP 49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzHUrjikFO:N0GnJMOWPClFdx6e0EALKWVTffZiPAcj
- TLSH T16FD5BF6D725081F9E6ABD038C81A480EE7F534E9536495EB1AA457DD2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory