General
- Target 2026-08-21_4210c04988a927aef375c76547a0f669_aspxspy_glassworm_icedid_njrat_stealc_vidar_xmrig
- Size 2.5MB
- Sample260822-tgem5a1shw
- SHA256 693a2dc6f65d257e4707a8b2df5d0bace81f169f924c312a8805d0ad07ba2699
- MD5 4210c04988a927aef375c76547a0f669
- SHA1 60e13d59682fff57573baa7301241185f268b9a7
- SHA512 356faaf02a66b0766f4ea719a2bba0f4756da3ef40303df67f955ca1ad8cc387b43d7dcd3e998162a481380b0b24f94f06d9bd5797f0484990a41fd511127223
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcqdI9Qs7rtqb:00GnJMOWPClFdx6e0EALKWVTffZiPAcK
- TLSH T1F5C5D06D725141F9C6AFC078C91B894FF7F138494364A5EB12A157AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-21_4210c04988a927aef375c76547a0f669_aspxspy_glassworm_icedid_njrat_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_4210c04988a927aef375c76547a0f669_aspxspy_glassworm_icedid_njrat_stealc_vidar_xmrig
- Size 2.5MB
- SHA256 693a2dc6f65d257e4707a8b2df5d0bace81f169f924c312a8805d0ad07ba2699
- MD5 4210c04988a927aef375c76547a0f669
- SHA1 60e13d59682fff57573baa7301241185f268b9a7
- SHA512 356faaf02a66b0766f4ea719a2bba0f4756da3ef40303df67f955ca1ad8cc387b43d7dcd3e998162a481380b0b24f94f06d9bd5797f0484990a41fd511127223
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcqdI9Qs7rtqb:00GnJMOWPClFdx6e0EALKWVTffZiPAcK
- TLSH T1F5C5D06D725141F9C6AFC078C91B894FF7F138494364A5EB12A157AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory