User tags
Assigned on submission by the user, not by sandbox detections.
experiment:claude-opus-4.6-repeat-pilot
profile:5bc3155e4da2b85364b79a5e
plan:194890df7f0746b554490773
mode:original
repeat:1
sha256:d9eb76b64e8aa9c10f7aa5f2630514cc73214bd0dc8db54cac48896d82017f8b
General
- Target 2026-01-16_aab80caf436f2598b33b3d7035ce4745_glassworm_icedid_njrat_stealc_vidar_xmrig.exe
- Size 1.6MB
- Sample260821-bvmlsazerg
- SHA256 d9eb76b64e8aa9c10f7aa5f2630514cc73214bd0dc8db54cac48896d82017f8b
- MD5 aab80caf436f2598b33b3d7035ce4745
- SHA1 20f574b77ebd9440e7bfd2ed9dc822a19f13d0ad
- SHA512 655c14a95d840a85ba67281144f0811dfa50481f65c3d45cbd2cf144ab197a68aa48fa013c9fc85980f784449a544182c42b573b6100f84354bec7f11d62f0e9
- SSDEEP 49152:S0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhJUIiI:S0GnJMOWPClFdx6e0EALKWVTffZiPAcc
- TLSH T14C758E6D725081F9E6ABD038C916880FE7F534A9536495EB0AA457DD2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target 2026-01-16_aab80caf436f2598b33b3d7035ce4745_glassworm_icedid_njrat_stealc_vidar_xmrig.exe
- Size 1.6MB
- SHA256 d9eb76b64e8aa9c10f7aa5f2630514cc73214bd0dc8db54cac48896d82017f8b
- MD5 aab80caf436f2598b33b3d7035ce4745
- SHA1 20f574b77ebd9440e7bfd2ed9dc822a19f13d0ad
- SHA512 655c14a95d840a85ba67281144f0811dfa50481f65c3d45cbd2cf144ab197a68aa48fa013c9fc85980f784449a544182c42b573b6100f84354bec7f11d62f0e9
- SSDEEP 49152:S0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhJUIiI:S0GnJMOWPClFdx6e0EALKWVTffZiPAcc
- TLSH T14C758E6D725081F9E6ABD038C916880FE7F534A9536495EB0AA457DD2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory