General
- Target 2026-09-04_5f81f7fcef21ed4ee799003286d00596_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.0MB
- Sample260905-lcbfxada39
- SHA256 418fd0335e08b685ecb0cf63001b80ae7a8e46e1d7625198777b616c6484770d
- MD5 5f81f7fcef21ed4ee799003286d00596
- SHA1 815574b2801fa6baa212b2157392000b970edd0d
- SHA512 c4dbc8cdfcfae1bb74c04339b3fdc8b02ef931203a775f010e4ac7dd0bf70b4310361b7f92704eb2e08da3f8386bc8ff991feca00f11e17624aad9a9c734b850
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcmWH/hWA:00GnJMOWPClFdx6e0EALKWVTffZiPAc9
- TLSH T1BDA5BF6D726141F5C6AFC138C91B890FF7F138594364A5EB12A157AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-04_5f81f7fcef21ed4ee799003286d00596_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_5f81f7fcef21ed4ee799003286d00596_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.0MB
- SHA256 418fd0335e08b685ecb0cf63001b80ae7a8e46e1d7625198777b616c6484770d
- MD5 5f81f7fcef21ed4ee799003286d00596
- SHA1 815574b2801fa6baa212b2157392000b970edd0d
- SHA512 c4dbc8cdfcfae1bb74c04339b3fdc8b02ef931203a775f010e4ac7dd0bf70b4310361b7f92704eb2e08da3f8386bc8ff991feca00f11e17624aad9a9c734b850
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcmWH/hWA:00GnJMOWPClFdx6e0EALKWVTffZiPAc9
- TLSH T1BDA5BF6D726141F5C6AFC138C91B890FF7F138594364A5EB12A157AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory