General
- Target 2026-09-16_52e2273062dafed9df1cbb1f2466fe90_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.7MB
- Sample260916-1f571sfr2w
- SHA256 286ecb072799c72334a7ad31b75f2bdd93d2c331fc5961dfbce59ebc42696336
- MD5 52e2273062dafed9df1cbb1f2466fe90
- SHA1 0ee33da8df36b3dff8241dd4142a862679651f6c
- SHA512 5eb70e05eb2e44d9101923624b4e3d181013c8f22fec11dba4d7c85dfcaa4d36cf8c4e3f57623baaac970259483f646b00f9d7259e9517aee977cf3edb18f9c0
- SSDEEP 49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzHUrjikFG:N0GnJMOWPClFdx6e0EALKWVTffZiPAcT
- TLSH T166D5BF6D725081F9E6ABD038C81A480EE7F534E9536495EB1AA457DD2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-16_52e2273062dafed9df1cbb1f2466fe90_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-16_52e2273062dafed9df1cbb1f2466fe90_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.7MB
- SHA256 286ecb072799c72334a7ad31b75f2bdd93d2c331fc5961dfbce59ebc42696336
- MD5 52e2273062dafed9df1cbb1f2466fe90
- SHA1 0ee33da8df36b3dff8241dd4142a862679651f6c
- SHA512 5eb70e05eb2e44d9101923624b4e3d181013c8f22fec11dba4d7c85dfcaa4d36cf8c4e3f57623baaac970259483f646b00f9d7259e9517aee977cf3edb18f9c0
- SSDEEP 49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8DzHUrjikFG:N0GnJMOWPClFdx6e0EALKWVTffZiPAcT
- TLSH T166D5BF6D725081F9E6ABD038C81A480EE7F534E9536495EB1AA457DD2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory