General
- Target 2026-11-01_e096212620f0c88edabb1fc9a7dca9dd_aspxspy_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.5MB
- Sample261102-gpjwlae191
- SHA256 526b9195acf8bad7a7a4ed02e8406fea2ee2512ffa6f9e0634469420103bfd42
- MD5 e096212620f0c88edabb1fc9a7dca9dd
- SHA1 8a1a496de0b0ee6c284604afe2e21692dd6d93fc
- SHA512 d25f0e1e1138f584bde8f3a15324489d1643e783546e9b501dc0333632116e430029860c75bb5eba4172e49d05b94129a9d6f525311691af675ceffdf9693587
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUJ8Y9c87Me1IRZ:00GnJMOWPClFdx6e0EALKWVTffZiPAc9
- TLSH T196C5DF6D725481F9D6ABD038C81A480FE7F538A9536495EB0AA457DD2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-01_e096212620f0c88edabb1fc9a7dca9dd_aspxspy_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_e096212620f0c88edabb1fc9a7dca9dd_aspxspy_glassworm_icedid_imuler_njrat_poison-ivy_stealc_vidar_xmrig
- Size 2.5MB
- SHA256 526b9195acf8bad7a7a4ed02e8406fea2ee2512ffa6f9e0634469420103bfd42
- MD5 e096212620f0c88edabb1fc9a7dca9dd
- SHA1 8a1a496de0b0ee6c284604afe2e21692dd6d93fc
- SHA512 d25f0e1e1138f584bde8f3a15324489d1643e783546e9b501dc0333632116e430029860c75bb5eba4172e49d05b94129a9d6f525311691af675ceffdf9693587
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUJ8Y9c87Me1IRZ:00GnJMOWPClFdx6e0EALKWVTffZiPAc9
- TLSH T196C5DF6D725481F9D6ABD038C81A480FE7F538A9536495EB0AA457DD2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Drops file in System32 directory