General
- Target 2026-09-08_375861dc3e5445c0a153ac13f3419f13_aspxspy_glassworm_icedid_njrat_stealc_vidar_xmrig
- Size 2.1MB
- Sample260908-wjx9csfp91
- SHA256 4e68176ae12be3b9b7d12ec27ee29ef21177ba8347960c5290def2dec7ac29e0
- MD5 375861dc3e5445c0a153ac13f3419f13
- SHA1 c8434dc8a0d528f90acfa5c945f64c899a47b809
- SHA512 f7bfc39f00e684b48f4f3b649c01fac8745b4a50b81a95346bc9b47bf8041deaa3bcb61418dbfd37971c627e8c3416c498803556328972dd2c4f4169f4058a8e
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcquVoV2BqVa0:00GnJMOWPClFdx6e0EALKWVTffZiPAcy
- TLSH T122A5CF6D72A441F9C6AFC178C91B890FF7F13859436495EB02A1579A2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-08_375861dc3e5445c0a153ac13f3419f13_aspxspy_glassworm_icedid_njrat_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_375861dc3e5445c0a153ac13f3419f13_aspxspy_glassworm_icedid_njrat_stealc_vidar_xmrig
- Size 2.1MB
- SHA256 4e68176ae12be3b9b7d12ec27ee29ef21177ba8347960c5290def2dec7ac29e0
- MD5 375861dc3e5445c0a153ac13f3419f13
- SHA1 c8434dc8a0d528f90acfa5c945f64c899a47b809
- SHA512 f7bfc39f00e684b48f4f3b649c01fac8745b4a50b81a95346bc9b47bf8041deaa3bcb61418dbfd37971c627e8c3416c498803556328972dd2c4f4169f4058a8e
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcquVoV2BqVa0:00GnJMOWPClFdx6e0EALKWVTffZiPAcy
- TLSH T122A5CF6D72A441F9C6AFC178C91B890FF7F13859436495EB02A1579A2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory