General
- Target 2026-08-30_bd6dd395731acef54422b21606a1fdc1_aspxspy_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.5MB
- Sample260831-ga3edseh23
- SHA256 4477a26cdf748af5368a3b556a6e1612778f4bab09372530c0efa70f16981f27
- MD5 bd6dd395731acef54422b21606a1fdc1
- SHA1 4b3dc38ce09a07834ea7cfd45de83918b7a733e7
- SHA512 e78af7cb500a0170f0dc8ab5ce91e57104be20d19eaf025bbcc414467cb1989757cc87396bf9d0daecceb74f9a5a36585f382fe6788dd3d2e2aa8e01d39eb700
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUJ8Y9c87MQUipV:00GnJMOWPClFdx6e0EALKWVTffZiPAcm
- TLSH T14DC5D06D725481F9D6ABD038C81B490EE7F538A9536495EB0AA457DE2F237C0C93BF20
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-30_bd6dd395731acef54422b21606a1fdc1_aspxspy_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_bd6dd395731acef54422b21606a1fdc1_aspxspy_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.5MB
- SHA256 4477a26cdf748af5368a3b556a6e1612778f4bab09372530c0efa70f16981f27
- MD5 bd6dd395731acef54422b21606a1fdc1
- SHA1 4b3dc38ce09a07834ea7cfd45de83918b7a733e7
- SHA512 e78af7cb500a0170f0dc8ab5ce91e57104be20d19eaf025bbcc414467cb1989757cc87396bf9d0daecceb74f9a5a36585f382fe6788dd3d2e2aa8e01d39eb700
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUJ8Y9c87MQUipV:00GnJMOWPClFdx6e0EALKWVTffZiPAcm
- TLSH T14DC5D06D725481F9D6ABD038C81B490EE7F538A9536495EB0AA457DE2F237C0C93BF20
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory