User tags
Assigned on submission by the user, not by sandbox detections.
experiment:claude-opus-4.6-repeat-pilot
profile:5bc3155e4da2b85364b79a5e
plan:194890df7f0746b554490773
mode:original
repeat:1
sha256:303cdac03ed23afe0c206334dbf6075a91bd667c015663349bda8682d15414ed
General
- Target 2026-01-16_039ff8cd72fffe8e192d7cf7bdb69a2c_aspxspy_ezcob_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig.exe
- Size 2.9MB
- Sample260821-dx571ssanc
- SHA256 303cdac03ed23afe0c206334dbf6075a91bd667c015663349bda8682d15414ed
- MD5 039ff8cd72fffe8e192d7cf7bdb69a2c
- SHA1 643f510020144c0c78da29c76f2df12307ee4e01
- SHA512 0854a3e242de82c8d29c9bb3ad253fb1b1171e73bf0f03ef6f80a6d288df300dbe51152ca6d04d463d8bebc0ae70854aab3a2c72f1d9935ffa6b7e0f8d098b5e
- SSDEEP 49152:w0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8Dze7jcmWH/xDyNdHR:w0GnJMOWPClFdx6e0EALKWVTffZiPAcA
- TLSH T15BD5D06D725441F9C6AFC078C91B890FF7F13899436495EB12A157AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target 2026-01-16_039ff8cd72fffe8e192d7cf7bdb69a2c_aspxspy_ezcob_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig.exe
- Size 2.9MB
- SHA256 303cdac03ed23afe0c206334dbf6075a91bd667c015663349bda8682d15414ed
- MD5 039ff8cd72fffe8e192d7cf7bdb69a2c
- SHA1 643f510020144c0c78da29c76f2df12307ee4e01
- SHA512 0854a3e242de82c8d29c9bb3ad253fb1b1171e73bf0f03ef6f80a6d288df300dbe51152ca6d04d463d8bebc0ae70854aab3a2c72f1d9935ffa6b7e0f8d098b5e
- SSDEEP 49152:w0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8Dze7jcmWH/xDyNdHR:w0GnJMOWPClFdx6e0EALKWVTffZiPAcA
- TLSH T15BD5D06D725441F9C6AFC078C91B890FF7F13899436495EB12A157AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory