General
- Target 2026-09-24_5e26e6d3054920654f8afb8e57bf9fbd_aspxspy_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.2MB
- Sample260925-kvdhjsty3r
- SHA256 df5ece846dc0c9aa8fcb89c48bfdd379d5a62ca6c3bb82ea3c7ae5cf93a99e6d
- MD5 5e26e6d3054920654f8afb8e57bf9fbd
- SHA1 417c4b497aa782560d63bb741978f57ddd043d54
- SHA512 fd1acb7e72bb76e60b06536594b51437705149dadcff4bdee4dccf98decfa2d6de95f6d6c8f80f9cabd9a5428a480ba72eb0049dc65c15601c44c2024187213d
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUjc2HhG82e1:00GnJMOWPClFdx6e0EALKWVTffZiPAco
- TLSH T117B5CF6D725081F9E6ABD038C81A480FE7F534A9536495EB0AA557DD2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-24_5e26e6d3054920654f8afb8e57bf9fbd_aspxspy_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-24_5e26e6d3054920654f8afb8e57bf9fbd_aspxspy_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.2MB
- SHA256 df5ece846dc0c9aa8fcb89c48bfdd379d5a62ca6c3bb82ea3c7ae5cf93a99e6d
- MD5 5e26e6d3054920654f8afb8e57bf9fbd
- SHA1 417c4b497aa782560d63bb741978f57ddd043d54
- SHA512 fd1acb7e72bb76e60b06536594b51437705149dadcff4bdee4dccf98decfa2d6de95f6d6c8f80f9cabd9a5428a480ba72eb0049dc65c15601c44c2024187213d
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUjc2HhG82e1:00GnJMOWPClFdx6e0EALKWVTffZiPAco
- TLSH T117B5CF6D725081F9E6ABD038C81A480FE7F534A9536495EB0AA557DD2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory