General
- Target 2026-05-17_12a4388c727fe7aefde3e86437701368_coinminer_glassworm_icedid_njrat_ryuk_sliver
- Size 3.3MB
- Sample260517-lk3kcset9v
- SHA256 bd2878525981d6ae870c68179dfaece54a7a3f5974bfa3693e9b94234d0cc3c9
- MD5 12a4388c727fe7aefde3e86437701368
- SHA1 c1844feb4a33e1fe54e9aca4c4e71f5570a3441c
- SHA512 53570e0fdb6607594b860b5abaa9fa0737e298f44f9f58f312e28084c31d2de52c4678f80d17ec32aaf8672af0250d44ae410052bf4ec14b0a10650a9b9313e8
- SSDEEP 49152:WdZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxm5E:2HvfGfZvZj1/N/z/omi
- TLSH T179F58DD2A3A600E8E9B7F23C85568517E7F2B81753709BCF15A44A761F236D12B3E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-17_12a4388c727fe7aefde3e86437701368_coinminer_glassworm_icedid_njrat_ryuk_sliver.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-17_12a4388c727fe7aefde3e86437701368_coinminer_glassworm_icedid_njrat_ryuk_sliver.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
agent
C2
-
http://lamtee.dpdns.org:443/agent.ashx
Attributes
-
mesh_id
0x6939166B8A3529ABA823A0FC82AEACA77237171010B6599D6E2C5D9C0D1D2A4FAB8F690DCF41A098064020F50F5236DF
-
server_id
5DF0CD53CA85F8308D35116F8BB34782E0698F98D877EEEAACDA71BDF98829EB754F39DF2CB3757972C4837693F2F762
-
wss
wss://lamtee.dpdns.org:443/agent.ashx
Targets
-
- Target 2026-05-17_12a4388c727fe7aefde3e86437701368_coinminer_glassworm_icedid_njrat_ryuk_sliver
- Size 3.3MB
- SHA256 bd2878525981d6ae870c68179dfaece54a7a3f5974bfa3693e9b94234d0cc3c9
- MD5 12a4388c727fe7aefde3e86437701368
- SHA1 c1844feb4a33e1fe54e9aca4c4e71f5570a3441c
- SHA512 53570e0fdb6607594b860b5abaa9fa0737e298f44f9f58f312e28084c31d2de52c4678f80d17ec32aaf8672af0250d44ae410052bf4ec14b0a10650a9b9313e8
- SSDEEP 49152:WdZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxm5E:2HvfGfZvZj1/N/z/omi
- TLSH T179F58DD2A3A600E8E9B7F23C85568517E7F2B81753709BCF15A44A761F236D12B3E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10