General
- Target 2026-08-31_6612ba67789559200cba81699be904e9_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 1.9MB
- Sample260831-x132lsab87
- SHA256 8b403f8215a3bcc80a355fca94ac45997bd54a72a56097888c81f191a337a5f0
- MD5 6612ba67789559200cba81699be904e9
- SHA1 10001c1164ac849134c62839c91f24b412a4df88
- SHA512 0d090a70e7c0030847bfdf89b9dc780c99868b8386e5e5ae92d592df0a389beefca33def3c665c2ccebe3024a836e7a746592f47ed2e5c55783865562631a6e2
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUrM+h:00GnJMOWPClFdx6e0EALKWVTffZiPAcQ
- TLSH T13395AF6D725081F9E6ABD038C91A480FE7F534A9536495EB0AA457DD2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-31_6612ba67789559200cba81699be904e9_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-31_6612ba67789559200cba81699be904e9_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 1.9MB
- SHA256 8b403f8215a3bcc80a355fca94ac45997bd54a72a56097888c81f191a337a5f0
- MD5 6612ba67789559200cba81699be904e9
- SHA1 10001c1164ac849134c62839c91f24b412a4df88
- SHA512 0d090a70e7c0030847bfdf89b9dc780c99868b8386e5e5ae92d592df0a389beefca33def3c665c2ccebe3024a836e7a746592f47ed2e5c55783865562631a6e2
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUrM+h:00GnJMOWPClFdx6e0EALKWVTffZiPAcQ
- TLSH T13395AF6D725081F9E6ABD038C91A480FE7F534A9536495EB0AA457DD2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory