General
- Target 2026-10-21_857e70d7fe5f536437c34180e2c1adc4_aspxspy_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig
- Size 1.8MB
- Sample261022-xpharsht8q
- SHA256 b099912378a01dbf5ea27d998ae2fd84e5036f391f9c23f63e94b86dbe7562cf
- MD5 857e70d7fe5f536437c34180e2c1adc4
- SHA1 5705b8ad6488fb5b71ca09f497dff39d7bc64dfb
- SHA512 365f214e5af8cac698aa388b07e7eccf5909f5d268cb93f75e37cbddd7b72e20020fbd1c2ac7026a86bcc04e2da2e625ed9f442d805c3edee99383a027f6aa5e
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcq4v:00GnJMOWPClFdx6e0EALKWVTffZiPAc9
- TLSH T1F795AE6D725441F5C6AFC078C91B890FF7F138594364A5EB12A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-21_857e70d7fe5f536437c34180e2c1adc4_aspxspy_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-21_857e70d7fe5f536437c34180e2c1adc4_aspxspy_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-21_857e70d7fe5f536437c34180e2c1adc4_aspxspy_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig
- Size 1.8MB
- SHA256 b099912378a01dbf5ea27d998ae2fd84e5036f391f9c23f63e94b86dbe7562cf
- MD5 857e70d7fe5f536437c34180e2c1adc4
- SHA1 5705b8ad6488fb5b71ca09f497dff39d7bc64dfb
- SHA512 365f214e5af8cac698aa388b07e7eccf5909f5d268cb93f75e37cbddd7b72e20020fbd1c2ac7026a86bcc04e2da2e625ed9f442d805c3edee99383a027f6aa5e
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhN7jcq4v:00GnJMOWPClFdx6e0EALKWVTffZiPAc9
- TLSH T1F795AE6D725441F5C6AFC078C91B890FF7F138594364A5EB12A167AA2F237D0CA3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory