General
- Target 2026-09-04_00640b518c8253870d087a7dc8120ac6_aspxspy_glassworm_icedid_njrat_stealc_vidar_xmrig
- Size 2.0MB
- Sample260905-yrj3tahn4x
- SHA256 ec58a8d46800d91293f1302dda5f9cae5de3042ca868f99d90d78f4e6c7c455d
- MD5 00640b518c8253870d087a7dc8120ac6
- SHA1 d8450f1cba5eee83a1d5bfd59c00a1201703d6bc
- SHA512 dea50d9aa485790d83535dd6d45539612cffe20432029b7d4f6b4798bee4bac1da104522d57c2a1d0abff19e78bda16e107fb40926d8dc201d4ed16e8bb8c140
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcqDrUSO1w:00GnJMOWPClFdx6e0EALKWVTffZiPAcO
- TLSH T168A5CF6D726141F5C6AFC078C91B890FF7F138594364A5EB12A157AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-04_00640b518c8253870d087a7dc8120ac6_aspxspy_glassworm_icedid_njrat_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_00640b518c8253870d087a7dc8120ac6_aspxspy_glassworm_icedid_njrat_stealc_vidar_xmrig
- Size 2.0MB
- SHA256 ec58a8d46800d91293f1302dda5f9cae5de3042ca868f99d90d78f4e6c7c455d
- MD5 00640b518c8253870d087a7dc8120ac6
- SHA1 d8450f1cba5eee83a1d5bfd59c00a1201703d6bc
- SHA512 dea50d9aa485790d83535dd6d45539612cffe20432029b7d4f6b4798bee4bac1da104522d57c2a1d0abff19e78bda16e107fb40926d8dc201d4ed16e8bb8c140
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcqDrUSO1w:00GnJMOWPClFdx6e0EALKWVTffZiPAcO
- TLSH T168A5CF6D726141F5C6AFC078C91B890FF7F138594364A5EB12A157AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory