General
- Target 2026-08-23_be789c78299eb5194877ab19ebd08a00_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.3MB
- Sample260823-2sagjswtew
- SHA256 a43ba9fcacabf54abd2ec216d5b4c0af760c5549d5f798a4ef580e87b3bb9b80
- MD5 be789c78299eb5194877ab19ebd08a00
- SHA1 f4d012467fe5efa2eb367a42cdc1a1e30650f18b
- SHA512 fe9cf3b52e72f1e77cc6bb16ef5e1ef33cc7704e9735d2660301e2f3bdaef62091f255acaf146bf26350dc7d83258a17497629f0d2391bc750a2719d075339f9
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUrMbtUA4l:00GnJMOWPClFdx6e0EALKWVTffZiPAcs
- TLSH T19CB5CF6D725081F9E6ABD038C81A490FE7F534A9536495EB0AA457DD2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-23_be789c78299eb5194877ab19ebd08a00_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_be789c78299eb5194877ab19ebd08a00_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_be789c78299eb5194877ab19ebd08a00_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.3MB
- SHA256 a43ba9fcacabf54abd2ec216d5b4c0af760c5549d5f798a4ef580e87b3bb9b80
- MD5 be789c78299eb5194877ab19ebd08a00
- SHA1 f4d012467fe5efa2eb367a42cdc1a1e30650f18b
- SHA512 fe9cf3b52e72f1e77cc6bb16ef5e1ef33cc7704e9735d2660301e2f3bdaef62091f255acaf146bf26350dc7d83258a17497629f0d2391bc750a2719d075339f9
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUrMbtUA4l:00GnJMOWPClFdx6e0EALKWVTffZiPAcs
- TLSH T19CB5CF6D725081F9E6ABD038C81A490FE7F534A9536495EB0AA457DD2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory