General
- Target 2026-10-28_a0d67d5671a0e7b06251c2ad2b83954f_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.4MB
- Sample261029-16b2vstx2l
- SHA256 ef67cb8bf031c6db39bd1517e754fa9ada1c03bd279625aea4b078dfe0ab4b5a
- MD5 a0d67d5671a0e7b06251c2ad2b83954f
- SHA1 b0ff66571d624110f80b66b3341bdc71046f4abf
- SHA512 209723609ab92ddd714af42414009c208fc746029ec7faffbf32302bfc7029f12d36ebfd3fbbb2e4a2042ad018e4c3cb95deb347b6a9a82d97401c9e85c280ce
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUh+hNskqCBGb:00GnJMOWPClFdx6e0EALKWVTffZiPAcm
- TLSH T11BB5CF6D725481F9D6AFD038C81A480FE7F538A9536495EB0AA4579E2F137C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-28_a0d67d5671a0e7b06251c2ad2b83954f_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-28_a0d67d5671a0e7b06251c2ad2b83954f_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_a0d67d5671a0e7b06251c2ad2b83954f_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.4MB
- SHA256 ef67cb8bf031c6db39bd1517e754fa9ada1c03bd279625aea4b078dfe0ab4b5a
- MD5 a0d67d5671a0e7b06251c2ad2b83954f
- SHA1 b0ff66571d624110f80b66b3341bdc71046f4abf
- SHA512 209723609ab92ddd714af42414009c208fc746029ec7faffbf32302bfc7029f12d36ebfd3fbbb2e4a2042ad018e4c3cb95deb347b6a9a82d97401c9e85c280ce
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUh+hNskqCBGb:00GnJMOWPClFdx6e0EALKWVTffZiPAcm
- TLSH T11BB5CF6D725481F9D6AFD038C81A480FE7F538A9536495EB0AA4579E2F137C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10XMRig Miner payload
Executes dropped EXE
Drops file in System32 directory