General
- Target 2026-09-08_c2b304c6bfc0152bc61f2e0db38bc98f_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 1.9MB
- Sample260908-pqd1qsztex
- SHA256 43c9ff85e1862cdfd92fc14768e289a57aff66b84e4b6a1c89ff21ddfddce75e
- MD5 c2b304c6bfc0152bc61f2e0db38bc98f
- SHA1 b038190c8669cfe1620e98e31ca09e997b8fb4c2
- SHA512 cbc574de0d303b2ddf21ab67d16f68e8fbf9047bda370917f13ea43ec73443b734d5cdb396a44dd486cb461702e1084028bd6e76c19d9b6eaa3e2aa7ffb40bc8
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcmWHtj:00GnJMOWPClFdx6e0EALKWVTffZiPAcL
- TLSH T1C195BF6D725141F5C6AFC078C91B890FF7F138594364A5EB12A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-08_c2b304c6bfc0152bc61f2e0db38bc98f_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_c2b304c6bfc0152bc61f2e0db38bc98f_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 1.9MB
- SHA256 43c9ff85e1862cdfd92fc14768e289a57aff66b84e4b6a1c89ff21ddfddce75e
- MD5 c2b304c6bfc0152bc61f2e0db38bc98f
- SHA1 b038190c8669cfe1620e98e31ca09e997b8fb4c2
- SHA512 cbc574de0d303b2ddf21ab67d16f68e8fbf9047bda370917f13ea43ec73443b734d5cdb396a44dd486cb461702e1084028bd6e76c19d9b6eaa3e2aa7ffb40bc8
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcmWHtj:00GnJMOWPClFdx6e0EALKWVTffZiPAcL
- TLSH T1C195BF6D725141F5C6AFC078C91B890FF7F138594364A5EB12A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory