General
- Target 2026-10-05_645c8d38277b1e029cbee206ca892454_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 1.9MB
- Sample261006-214elayvb1
- SHA256 f60877f35d2214806f39883c4b0d3f49f0754cb1916b319169f5abc2da6b0407
- MD5 645c8d38277b1e029cbee206ca892454
- SHA1 215b68b6ee11eead8a68817e30c4b21b88f56434
- SHA512 81dfe6a23b0c8f13d57236abcd17f3c7c6f890d0579664ccd5c67bd0cb52e40e0d19e8c1454b67ff03c727050e8ff4bf9f4adcccf45492d735c03490afaa4b12
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcmWHd:00GnJMOWPClFdx6e0EALKWVTffZiPAcr
- TLSH T1EB95BF6D726141F5C6AFC178C91B890FF7F13859436495EB02A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-05_645c8d38277b1e029cbee206ca892454_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-05_645c8d38277b1e029cbee206ca892454_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-05_645c8d38277b1e029cbee206ca892454_aspxspy_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 1.9MB
- SHA256 f60877f35d2214806f39883c4b0d3f49f0754cb1916b319169f5abc2da6b0407
- MD5 645c8d38277b1e029cbee206ca892454
- SHA1 215b68b6ee11eead8a68817e30c4b21b88f56434
- SHA512 81dfe6a23b0c8f13d57236abcd17f3c7c6f890d0579664ccd5c67bd0cb52e40e0d19e8c1454b67ff03c727050e8ff4bf9f4adcccf45492d735c03490afaa4b12
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcmWHd:00GnJMOWPClFdx6e0EALKWVTffZiPAcr
- TLSH T1EB95BF6D726141F5C6AFC178C91B890FF7F13859436495EB02A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory