General
- Target 2026-09-09_d8b0bae0134bafec73e978d6dfc6539c_aspxspy_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig
- Size 2.2MB
- Sample260910-2vgcwahp3s
- SHA256 8ac003f0a2300fde22ceefa03d473b65a4d5b3c8fa935cbdcc911da68e5946a8
- MD5 d8b0bae0134bafec73e978d6dfc6539c
- SHA1 0be952df0265f46f737d8df10c0d56a52664289d
- SHA512 9fedf188bd80029a7d64f0235ab58d754a66419d6a7dc1c145f0bba42a8aa396278ba8b520c966ec0c024032b7b38440a36d5ebc02d35d523925a91c0aad72f1
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcqfyTN9YjTb2:00GnJMOWPClFdx6e0EALKWVTffZiPAc3
- TLSH T113B5C06D626141F5C6AFC178C91B890FF7F138494364E5EB12A157AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-09_d8b0bae0134bafec73e978d6dfc6539c_aspxspy_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-09_d8b0bae0134bafec73e978d6dfc6539c_aspxspy_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_d8b0bae0134bafec73e978d6dfc6539c_aspxspy_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig
- Size 2.2MB
- SHA256 8ac003f0a2300fde22ceefa03d473b65a4d5b3c8fa935cbdcc911da68e5946a8
- MD5 d8b0bae0134bafec73e978d6dfc6539c
- SHA1 0be952df0265f46f737d8df10c0d56a52664289d
- SHA512 9fedf188bd80029a7d64f0235ab58d754a66419d6a7dc1c145f0bba42a8aa396278ba8b520c966ec0c024032b7b38440a36d5ebc02d35d523925a91c0aad72f1
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcqfyTN9YjTb2:00GnJMOWPClFdx6e0EALKWVTffZiPAc3
- TLSH T113B5C06D626141F5C6AFC178C91B890FF7F138494364E5EB12A157AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory