General
- Target 2026-08-19_8c7fe84f2512d2b31f9089c10b3de475_aspxspy_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig
- Size 2.2MB
- Sample260819-w7qt7a1ake
- SHA256 40ab04ba83f14348265acdb8cc3bc5a30ba3e523f1adec3e75210499c5a81f2c
- MD5 8c7fe84f2512d2b31f9089c10b3de475
- SHA1 14194e3483767520c2e16c9567c1c164725a4f04
- SHA512 097f0b0e95b5c93aa0712dffd2c39251c994ea7a383c6e062546d503c8a3a8d0bede56fb2b9036c73ddbe51ba5912966ca409ecd2f3f42299fc59aeaf8dba730
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcq4nPBu3gBOt:00GnJMOWPClFdx6e0EALKWVTffZiPAck
- TLSH T129B5C06D725441F9C6AFC178C91B890FF7F13849436495EB12A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-19_8c7fe84f2512d2b31f9089c10b3de475_aspxspy_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_8c7fe84f2512d2b31f9089c10b3de475_aspxspy_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig
- Size 2.2MB
- SHA256 40ab04ba83f14348265acdb8cc3bc5a30ba3e523f1adec3e75210499c5a81f2c
- MD5 8c7fe84f2512d2b31f9089c10b3de475
- SHA1 14194e3483767520c2e16c9567c1c164725a4f04
- SHA512 097f0b0e95b5c93aa0712dffd2c39251c994ea7a383c6e062546d503c8a3a8d0bede56fb2b9036c73ddbe51ba5912966ca409ecd2f3f42299fc59aeaf8dba730
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcq4nPBu3gBOt:00GnJMOWPClFdx6e0EALKWVTffZiPAck
- TLSH T129B5C06D725441F9C6AFC178C91B890FF7F13849436495EB12A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory