General
- Target 2026-10-28_28e3dd38f6b39a9cf0d3d2f4af88a2c1_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig
- Size 2.3MB
- Sample261030-jythhaxtfs
- SHA256 0aa79f0504f2ba11fa8bcefb7484dd3cfb4186919fd1838e3c7ae22b703274a3
- MD5 28e3dd38f6b39a9cf0d3d2f4af88a2c1
- SHA1 e11359eb9bbbd8ee5f44ea2bc7bd38c7aebad2d5
- SHA512 e3c8102a46510656696b3e7680167503b675e591486829d42f3fdf8bcda3ce7379875453855ba74eceb7d812f9b5c4d0f898cb00122d855a8636e1910c2021fc
- SSDEEP 49152:w0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8Dzcd+ekL:w0GnJMOWPClFdx6e0EALKWVTffZiPAcl
- TLSH T193B5AE6D725141F9C6AFC078C91B890FF7F13899437495EB12A157AA2F237D08A3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-28_28e3dd38f6b39a9cf0d3d2f4af88a2c1_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_28e3dd38f6b39a9cf0d3d2f4af88a2c1_glassworm_icedid_imuler_njrat_stealc_vidar_xmrig
- Size 2.3MB
- SHA256 0aa79f0504f2ba11fa8bcefb7484dd3cfb4186919fd1838e3c7ae22b703274a3
- MD5 28e3dd38f6b39a9cf0d3d2f4af88a2c1
- SHA1 e11359eb9bbbd8ee5f44ea2bc7bd38c7aebad2d5
- SHA512 e3c8102a46510656696b3e7680167503b675e591486829d42f3fdf8bcda3ce7379875453855ba74eceb7d812f9b5c4d0f898cb00122d855a8636e1910c2021fc
- SSDEEP 49152:w0wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjcz8Dzcd+ekL:w0GnJMOWPClFdx6e0EALKWVTffZiPAcl
- TLSH T193B5AE6D725141F9C6AFC078C91B890FF7F13899437495EB12A157AA2F237D08A3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory