General
- Target 2026-08-21_5564c4a22dc6ade86a601f0aa9bc20cb_aspxspy_glassworm_icedid_njrat_stealc_vidar_xmrig
- Size 2.5MB
- Sample260822-sa8f7avhre
- SHA256 a0e135427847497b7f37bb3e0d8f1e2c8636de89fea7246ee9df083d7f6dd30d
- MD5 5564c4a22dc6ade86a601f0aa9bc20cb
- SHA1 ffa083620d4c63aaf5d43615acea31065d5af59f
- SHA512 5b9f3351e8a5b970bf6d9d2739c0b02698e73318da7cf78a25edee0858db1917f936f07ab13679297a16e4ba9488d19f708b532e41730944acc15000dff697d6
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcqdI9Qs7rtqm:00GnJMOWPClFdx6e0EALKWVTffZiPAcr
- TLSH T1A1C5D06D725541F9C6AFC078C91B890FF7F138494364A5EB12A157AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-21_5564c4a22dc6ade86a601f0aa9bc20cb_aspxspy_glassworm_icedid_njrat_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_5564c4a22dc6ade86a601f0aa9bc20cb_aspxspy_glassworm_icedid_njrat_stealc_vidar_xmrig
- Size 2.5MB
- SHA256 a0e135427847497b7f37bb3e0d8f1e2c8636de89fea7246ee9df083d7f6dd30d
- MD5 5564c4a22dc6ade86a601f0aa9bc20cb
- SHA1 ffa083620d4c63aaf5d43615acea31065d5af59f
- SHA512 5b9f3351e8a5b970bf6d9d2739c0b02698e73318da7cf78a25edee0858db1917f936f07ab13679297a16e4ba9488d19f708b532e41730944acc15000dff697d6
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcqdI9Qs7rtqm:00GnJMOWPClFdx6e0EALKWVTffZiPAcr
- TLSH T1A1C5D06D725541F9C6AFC078C91B890FF7F138494364A5EB12A157AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory