General
- Target 2026-09-17_ce7e420e7b7892521742794c5bf95484_aspxspy_glassworm_icedid_njrat_stealc_vidar_xmrig
- Size 1.9MB
- Sample260917-thephsgb45
- SHA256 904acb22120090a7acf5be3f468c71c6dc7f5cc21ee17ae88d7bfd7b8ee937fc
- MD5 ce7e420e7b7892521742794c5bf95484
- SHA1 246fb77a541d9d28f5d3c3bb4c7003bc183b4ff1
- SHA512 3082a09214169ccc8fd873f9417be10e88368a1704f9b38df4a870a6dd8fe7b925858c4e280e48e431b16ec6bc0886211cb74d0e66af55944497cf8e3ac33338
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcmWIOV:00GnJMOWPClFdx6e0EALKWVTffZiPAch
- TLSH T15695BF6D725441F9C6AFC138C91B890FF7F138594364A5EB12A157AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-17_ce7e420e7b7892521742794c5bf95484_aspxspy_glassworm_icedid_njrat_stealc_vidar_xmrig.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-17_ce7e420e7b7892521742794c5bf95484_aspxspy_glassworm_icedid_njrat_stealc_vidar_xmrig.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-17_ce7e420e7b7892521742794c5bf95484_aspxspy_glassworm_icedid_njrat_stealc_vidar_xmrig
- Size 1.9MB
- SHA256 904acb22120090a7acf5be3f468c71c6dc7f5cc21ee17ae88d7bfd7b8ee937fc
- MD5 ce7e420e7b7892521742794c5bf95484
- SHA1 246fb77a541d9d28f5d3c3bb4c7003bc183b4ff1
- SHA512 3082a09214169ccc8fd873f9417be10e88368a1704f9b38df4a870a6dd8fe7b925858c4e280e48e431b16ec6bc0886211cb74d0e66af55944497cf8e3ac33338
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcmWIOV:00GnJMOWPClFdx6e0EALKWVTffZiPAch
- TLSH T15695BF6D725441F9C6AFC138C91B890FF7F138594364A5EB12A157AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory