General
- Target 2026-09-18_e6513848684d1e6f70d3f1cae5e4d44d_aspxspy_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.1MB
- Sample260918-pbfwsavcmc
- SHA256 c56fe861d1d789640ec25c6b6cc5584bc6949c64e89275e019b6862e8172ecd6
- MD5 e6513848684d1e6f70d3f1cae5e4d44d
- SHA1 46b8d81ebdde51b1b00bda91ba2e94fa4a7c09e5
- SHA512 c2040ec3a3a9fe40f55a03aed5447d804640177b39bec853ef649b84f1e03f67457f82115c0d7c699fa7905ead0b0d1d1cec95baf5f89f728c5f9dbce99de761
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUJ8Y9cgxU:00GnJMOWPClFdx6e0EALKWVTffZiPAc9
- TLSH T1F7A5BF6D725081F9E6ABD038C91A480FE7F534A9536495EB0AA457DD2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-18_e6513848684d1e6f70d3f1cae5e4d44d_aspxspy_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-18_e6513848684d1e6f70d3f1cae5e4d44d_aspxspy_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.1MB
- SHA256 c56fe861d1d789640ec25c6b6cc5584bc6949c64e89275e019b6862e8172ecd6
- MD5 e6513848684d1e6f70d3f1cae5e4d44d
- SHA1 46b8d81ebdde51b1b00bda91ba2e94fa4a7c09e5
- SHA512 c2040ec3a3a9fe40f55a03aed5447d804640177b39bec853ef649b84f1e03f67457f82115c0d7c699fa7905ead0b0d1d1cec95baf5f89f728c5f9dbce99de761
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUJ8Y9cgxU:00GnJMOWPClFdx6e0EALKWVTffZiPAc9
- TLSH T1F7A5BF6D725081F9E6ABD038C91A480FE7F534A9536495EB0AA457DD2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory