General
- Target 2026-09-17_f1d1e4ee4db9e64fc8c374075e8d9c4e_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.6MB
- Sample260917-saa6pafc78
- SHA256 c0c67eea53aece22868c6f2b320361f51a5a98314f9875d5a9c61b1831854c03
- MD5 f1d1e4ee4db9e64fc8c374075e8d9c4e
- SHA1 d34ef35f9d9f8eb175320b170081ba077c34f246
- SHA512 8bde74e0591138a3f533cb386f2a9caa0e978e6d3912c682e636add41dc6d252ff077311874229cb67b1fe3136e7b3d247390ea8956cb8525b5b922890726b06
- SSDEEP 49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8Dze7jcHhEWdspHa:N0GnJMOWPClFdx6e0EALKWVTffZiPAcn
- TLSH T1FBC5CF6D729141F5C6AFC078C91B890FF7F13899436495EB12A157AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-17_f1d1e4ee4db9e64fc8c374075e8d9c4e_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-17_f1d1e4ee4db9e64fc8c374075e8d9c4e_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.6MB
- SHA256 c0c67eea53aece22868c6f2b320361f51a5a98314f9875d5a9c61b1831854c03
- MD5 f1d1e4ee4db9e64fc8c374075e8d9c4e
- SHA1 d34ef35f9d9f8eb175320b170081ba077c34f246
- SHA512 8bde74e0591138a3f533cb386f2a9caa0e978e6d3912c682e636add41dc6d252ff077311874229cb67b1fe3136e7b3d247390ea8956cb8525b5b922890726b06
- SSDEEP 49152:N0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8Dze7jcHhEWdspHa:N0GnJMOWPClFdx6e0EALKWVTffZiPAcn
- TLSH T1FBC5CF6D729141F5C6AFC078C91B890FF7F13899436495EB12A157AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory