General
- Target 2026-09-07_a403172184e3824949ba4e3daf648f8e_aspxspy_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.4MB
- Sample260908-kzddcav1cs
- SHA256 2f54435add42cda478b599ff8057d2a38474bff7485b8631c2c59c8ced29c91f
- MD5 a403172184e3824949ba4e3daf648f8e
- SHA1 f89c1b44c3eb98972c9b1dc904c837cf7cc80458
- SHA512 ea881f6cb22e70a0b71148d250317e130d50a55422f77334a2738d33e654b6d730bf22e09ee0bd97b9ba26322df7cdf18f6cad8d34b8bf26b40782db039679e5
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUJ8Y9c87Me1IRa:00GnJMOWPClFdx6e0EALKWVTffZiPAcW
- TLSH T174C5CF6D725481F9E6ABD038C81B480FE7F534A9536495EB0AA4579D2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-07_a403172184e3824949ba4e3daf648f8e_aspxspy_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_a403172184e3824949ba4e3daf648f8e_aspxspy_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.4MB
- SHA256 2f54435add42cda478b599ff8057d2a38474bff7485b8631c2c59c8ced29c91f
- MD5 a403172184e3824949ba4e3daf648f8e
- SHA1 f89c1b44c3eb98972c9b1dc904c837cf7cc80458
- SHA512 ea881f6cb22e70a0b71148d250317e130d50a55422f77334a2738d33e654b6d730bf22e09ee0bd97b9ba26322df7cdf18f6cad8d34b8bf26b40782db039679e5
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUJ8Y9c87Me1IRa:00GnJMOWPClFdx6e0EALKWVTffZiPAcW
- TLSH T174C5CF6D725481F9E6ABD038C81B480FE7F534A9536495EB0AA4579D2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory