General

  • Target
    2026-09-09_cd070f6e02365cd67d0d1cb2f63c608a_aspxspy_ezcob_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
  • Size 2.3MB
  • Sample260910-3b3bnsxcrc
  • SHA256 fe43d9461f1cbe353313901b764283dfbaa9434ecb762da30f8d1199fe4b3d5e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Targets

    • Target
      2026-09-09_cd070f6e02365cd67d0d1cb2f63c608a_aspxspy_ezcob_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
    • Size 2.3MB
    • SHA256 fe43d9461f1cbe353313901b764283dfbaa9434ecb762da30f8d1199fe4b3d5e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    • Family: xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • XMRig Miner payload

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks