General
- Target 2026-08-20_69b02a3b7fff9158800c6b6f2741b0b9_aspxspy_glassworm_icedid_njrat_stealc_vidar_xmrig
- Size 2.1MB
- Sample260820-pr7pfacl7w
- SHA256 3d72302bd51218e47551fd0c69493e9d9a279c82ffd752e36fb387776d28b6db
- MD5 69b02a3b7fff9158800c6b6f2741b0b9
- SHA1 932428a9d1c5135b921b02f2ebf4cfecd839be10
- SHA512 e3475e892403bf7505d98fc94193265d9c3ac7d2fc9954124e5d872e1cdd0147cb22515ba2d08331cf566d0b6c2ed6b6ee735e2b6a2c6e0eb3c6b415d98a0e74
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcqdI9QSNPbPW:00GnJMOWPClFdx6e0EALKWVTffZiPAcu
- TLSH T159A5CF6D726541F9C6AFC078C91B890FF7F13859436495EB02A157AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-20_69b02a3b7fff9158800c6b6f2741b0b9_aspxspy_glassworm_icedid_njrat_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_69b02a3b7fff9158800c6b6f2741b0b9_aspxspy_glassworm_icedid_njrat_stealc_vidar_xmrig
- Size 2.1MB
- SHA256 3d72302bd51218e47551fd0c69493e9d9a279c82ffd752e36fb387776d28b6db
- MD5 69b02a3b7fff9158800c6b6f2741b0b9
- SHA1 932428a9d1c5135b921b02f2ebf4cfecd839be10
- SHA512 e3475e892403bf7505d98fc94193265d9c3ac7d2fc9954124e5d872e1cdd0147cb22515ba2d08331cf566d0b6c2ed6b6ee735e2b6a2c6e0eb3c6b415d98a0e74
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcqdI9QSNPbPW:00GnJMOWPClFdx6e0EALKWVTffZiPAcu
- TLSH T159A5CF6D726541F9C6AFC078C91B890FF7F13859436495EB02A157AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory