General
- Target 2026-09-08_b08932aae46974dc41b0365948599654_ezcob_glassworm_icedid_njrat_stealc_vidar_xmrig
- Size 1.6MB
- Sample260908-qlpr4scj3y
- SHA256 3728ca429ebc1ef50e217638b3508e39474ad10d5ae4a5b513b1af8adfa8ff76
- MD5 b08932aae46974dc41b0365948599654
- SHA1 0c7e601b0ab44790089048b263cbe4091c2b16f5
- SHA512 b81f6eea55d286b072f5b7aa1107252053557aca034183f3b6a76d23096384aca76b7ba5482fb641e8864f1689526b9c1d0ee639c618dcc2e1b64545eb5fa52f
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhcuJqb:00GnJMOWPClFdx6e0EALKWVTffZiPAcR
- TLSH T1DF759D6D729141F5C6AFC178C91B890FF7F138594364A5EB02A157AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-08_b08932aae46974dc41b0365948599654_ezcob_glassworm_icedid_njrat_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-08_b08932aae46974dc41b0365948599654_ezcob_glassworm_icedid_njrat_stealc_vidar_xmrig.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_b08932aae46974dc41b0365948599654_ezcob_glassworm_icedid_njrat_stealc_vidar_xmrig
- Size 1.6MB
- SHA256 3728ca429ebc1ef50e217638b3508e39474ad10d5ae4a5b513b1af8adfa8ff76
- MD5 b08932aae46974dc41b0365948599654
- SHA1 0c7e601b0ab44790089048b263cbe4091c2b16f5
- SHA512 b81f6eea55d286b072f5b7aa1107252053557aca034183f3b6a76d23096384aca76b7ba5482fb641e8864f1689526b9c1d0ee639c618dcc2e1b64545eb5fa52f
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhcuJqb:00GnJMOWPClFdx6e0EALKWVTffZiPAcR
- TLSH T1DF759D6D729141F5C6AFC178C91B890FF7F138594364A5EB02A157AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory