General
- Target 2026-09-17_eb1932e441fc851a7d8fe1f61bcce44e_aspxspy_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.5MB
- Sample260917-sh7jvsfe55
- SHA256 0c11025b60d73486d3728d74ef71333ebe9669cd118c689c515dbb9eb1ad89d6
- MD5 eb1932e441fc851a7d8fe1f61bcce44e
- SHA1 45b020eb9bc64e93558307baf5387c6235909f27
- SHA512 d29c62a9924d8a661e1d066d56938f5a2341d69c48b13f1a9ab28d98606858cfe4a37f9f5a934dda206c05ec5003a705fc84b13ce0fad7910b8fd774bb40df55
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUjc2HhG82DiM1Z:00GnJMOWPClFdx6e0EALKWVTffZiPAcZ
- TLSH T1C3C5CF2D725481F9E6ABD038C91A480FE7F53899536495EB0AA157DD2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-17_eb1932e441fc851a7d8fe1f61bcce44e_aspxspy_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-17_eb1932e441fc851a7d8fe1f61bcce44e_aspxspy_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.5MB
- SHA256 0c11025b60d73486d3728d74ef71333ebe9669cd118c689c515dbb9eb1ad89d6
- MD5 eb1932e441fc851a7d8fe1f61bcce44e
- SHA1 45b020eb9bc64e93558307baf5387c6235909f27
- SHA512 d29c62a9924d8a661e1d066d56938f5a2341d69c48b13f1a9ab28d98606858cfe4a37f9f5a934dda206c05ec5003a705fc84b13ce0fad7910b8fd774bb40df55
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUjc2HhG82DiM1Z:00GnJMOWPClFdx6e0EALKWVTffZiPAcZ
- TLSH T1C3C5CF2D725481F9E6ABD038C91A480FE7F53899536495EB0AA157DD2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory