General
- Target 2026-08-20_635f28b1fb65a8649ec2b47f4f64fd49_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.4MB
- Sample260820-pva5mszza1
- SHA256 be6004b5c81d4dcf6201cf159771bfe6755b30c07e4a9b6cf8e68ee91bed80bf
- MD5 635f28b1fb65a8649ec2b47f4f64fd49
- SHA1 8c7fe60fecf6a945e1cd45eb9b1133c5df3c29be
- SHA512 95f5268953d83e002d78c3bba50697420a0c4e978cb5ac991951599e7cbf87ca31bec6a0c00713543ede20baf31a54ff301e521d0e5cd0ea48ba21c025378d16
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUh+hNFV5bGzs:00GnJMOWPClFdx6e0EALKWVTffZiPAcf
- TLSH T156C5C06D725481F9D6ABD038C81A480FE7F534A9536495EB0AA457DE2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-20_635f28b1fb65a8649ec2b47f4f64fd49_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_635f28b1fb65a8649ec2b47f4f64fd49_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.4MB
- SHA256 be6004b5c81d4dcf6201cf159771bfe6755b30c07e4a9b6cf8e68ee91bed80bf
- MD5 635f28b1fb65a8649ec2b47f4f64fd49
- SHA1 8c7fe60fecf6a945e1cd45eb9b1133c5df3c29be
- SHA512 95f5268953d83e002d78c3bba50697420a0c4e978cb5ac991951599e7cbf87ca31bec6a0c00713543ede20baf31a54ff301e521d0e5cd0ea48ba21c025378d16
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUh+hNFV5bGzs:00GnJMOWPClFdx6e0EALKWVTffZiPAcf
- TLSH T156C5C06D725481F9D6ABD038C81A480FE7F534A9536495EB0AA457DE2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory