General
- Target 2026-08-30_92ed221c36d0493d9e9f6833f3a31252_glassworm_icedid_njrat_stealc_vidar_xmrig
- Size 1.6MB
- Sample260831-jzxljsfl5w
- SHA256 2cd7b8d2f89817d9f183ad161d916c218fbb21e5b7bd9c3c42d077f6d8024ee8
- MD5 92ed221c36d0493d9e9f6833f3a31252
- SHA1 948a1f72ac1f1dbba2395440eff56a4d3786008e
- SHA512 459384e085cfdcd1666b495fb93ccf1c6158e42a7a379fa22a3dfce5171587b50ef67f7ea3969438760a5a36656295d064c24f4b1d81b9e653528f57a73162ae
- SSDEEP 49152:XPujn/TJQ1NLlSqrU5tUE1etEtLlWiTHfeiEA2RQ6zHvyRWMzA7wGn:XPcn/TJKSb5tN1etEtLlWiTHfeiEA2RD
- TLSH T187756C6D72A540F5D6ABC178C91A890BF3F138494374D6EF02A15B6A1F277D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-30_92ed221c36d0493d9e9f6833f3a31252_glassworm_icedid_njrat_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-30_92ed221c36d0493d9e9f6833f3a31252_glassworm_icedid_njrat_stealc_vidar_xmrig.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_92ed221c36d0493d9e9f6833f3a31252_glassworm_icedid_njrat_stealc_vidar_xmrig
- Size 1.6MB
- SHA256 2cd7b8d2f89817d9f183ad161d916c218fbb21e5b7bd9c3c42d077f6d8024ee8
- MD5 92ed221c36d0493d9e9f6833f3a31252
- SHA1 948a1f72ac1f1dbba2395440eff56a4d3786008e
- SHA512 459384e085cfdcd1666b495fb93ccf1c6158e42a7a379fa22a3dfce5171587b50ef67f7ea3969438760a5a36656295d064c24f4b1d81b9e653528f57a73162ae
- SSDEEP 49152:XPujn/TJQ1NLlSqrU5tUE1etEtLlWiTHfeiEA2RQ6zHvyRWMzA7wGn:XPcn/TJKSb5tN1etEtLlWiTHfeiEA2RD
- TLSH T187756C6D72A540F5D6ABC178C91A890BF3F138494374D6EF02A15B6A1F277D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.