General
- Target 2026-08-30_dfce7574a5f6f03e95ea015414cf1298_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig
- Size 2.3MB
- Sample260831-c7n6tatepb
- SHA256 4ffb5669c31e93b0bb1928cd39eb1afbbda65cb0650d882eff6a42db708ae1cb
- MD5 dfce7574a5f6f03e95ea015414cf1298
- SHA1 cfdbb384d1b93c912414cdcfcad803a322d543d0
- SHA512 2611b64b1f90c312950537f3c35a318f7023ca9fb221b9387781fd6af185653a6f9dae04cce36be280406d1fb4807b235f4ffb4aa5ab0f66679cf7c126499261
- SSDEEP 49152:w0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzzxTMS8TgHHQ6:w0GnJMOWPClFdx6e0EALKWVTffZiPAc9
- TLSH T1E4B5AE6D725141F5C6AFC078C91B894FF7F13899436495EB12A167AA2F237C0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-30_dfce7574a5f6f03e95ea015414cf1298_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_dfce7574a5f6f03e95ea015414cf1298_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig
- Size 2.3MB
- SHA256 4ffb5669c31e93b0bb1928cd39eb1afbbda65cb0650d882eff6a42db708ae1cb
- MD5 dfce7574a5f6f03e95ea015414cf1298
- SHA1 cfdbb384d1b93c912414cdcfcad803a322d543d0
- SHA512 2611b64b1f90c312950537f3c35a318f7023ca9fb221b9387781fd6af185653a6f9dae04cce36be280406d1fb4807b235f4ffb4aa5ab0f66679cf7c126499261
- SSDEEP 49152:w0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzzxTMS8TgHHQ6:w0GnJMOWPClFdx6e0EALKWVTffZiPAc9
- TLSH T1E4B5AE6D725141F5C6AFC078C91B894FF7F13899436495EB12A167AA2F237C0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory