General
- Target 2026-11-09_32292ab120c7ab3eba7040b693957f96_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 1.9MB
- Sample261110-26lfzacb92
- SHA256 d0dd603b10d38c8bcb42f2eb17d8564e3f86de6ffa001c8f77d1c61071f0f028
- MD5 32292ab120c7ab3eba7040b693957f96
- SHA1 47477829338ed0bae3c977cc1e80e487bdd1042c
- SHA512 8a89b94bdedfe25653e2508f0a0e688960847192f9cf4aa3cd445e8d3e09313ea742a90b721873a71c2c8d3f60e00d89dbcd65ff8138f0d8b085f4a055cffc41
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUrMF:00GnJMOWPClFdx6e0EALKWVTffZiPAc5
- TLSH T12695AE6D725081F9E6ABD038C91A480FE7F534A9536495EB0AA457DD2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-09_32292ab120c7ab3eba7040b693957f96_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-09_32292ab120c7ab3eba7040b693957f96_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-09_32292ab120c7ab3eba7040b693957f96_glassworm_icedid_njrat_poison-ivy_stealc_vidar_xmrig
- Size 1.9MB
- SHA256 d0dd603b10d38c8bcb42f2eb17d8564e3f86de6ffa001c8f77d1c61071f0f028
- MD5 32292ab120c7ab3eba7040b693957f96
- SHA1 47477829338ed0bae3c977cc1e80e487bdd1042c
- SHA512 8a89b94bdedfe25653e2508f0a0e688960847192f9cf4aa3cd445e8d3e09313ea742a90b721873a71c2c8d3f60e00d89dbcd65ff8138f0d8b085f4a055cffc41
- SSDEEP 49152:00wjnJMOWh50kC1/dVFdx6e0EALKWVTffZiPAcRq6jHjnz8DhoUrMF:00GnJMOWPClFdx6e0EALKWVTffZiPAc5
- TLSH T12695AE6D725081F9E6ABD038C91A480FE7F534A9536495EB0AA457DD2F237C0CA3BF21
- MD5 SHA1 SHA512 SSDEEP TLSH
XMRig Miner payload
Executes dropped EXE
Drops file in System32 directory