General
- Target 2026-05-28_a22d4a3f120c00d2af452b72214b1fa9_coinminer_glassworm_icedid_njrat_ryuk_sliver
- Size 3.3MB
- Sample260528-v7vmpshs6n
- SHA256 b7fafd2ef94d7e2a5fd85959b9eda82393edba368dfd93118b718e99c2f33239
- MD5 a22d4a3f120c00d2af452b72214b1fa9
- SHA1 bf0de9fcf951c0ca31c836cf1ab9e0fb3047ec21
- SHA512 ce9c6e65cb93acd9e1de6ccde796516b54c063d392f3b9383f5f0462130b8f0ae6a1e59439d2f2b4d835f5538a40dc0755f8d3b4b69388d3650a2acaff4902e6
- SSDEEP 49152:ndZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxw5bQ:dHvfGfZvZj1/N/z/owJQ
- TLSH T1BFF58DD2A3A600E8E9B7F23C85568517E7F1B81753709BCF16A44A761F236D12B3E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-28_a22d4a3f120c00d2af452b72214b1fa9_coinminer_glassworm_icedid_njrat_ryuk_sliver.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-28_a22d4a3f120c00d2af452b72214b1fa9_coinminer_glassworm_icedid_njrat_ryuk_sliver.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
O
C2
-
http://o.shininghay.qzz.io:443/agent.ashx
Attributes
-
mesh_id
0x757428E98411B0593268DE7A68A13249B08740CBC72424D914785355B4ED85CE542E2A0D33DC065ED07E5E282398C546
-
server_id
EE4B2270FAB0D9CBBC0DBFC1F49DCE56746265CD3AAAEBB136B54F6012418EEAE220A210C996087E048A89EB1343DE17
-
wss
wss://o.shininghay.qzz.io:443/agent.ashx
Targets
-
- Target 2026-05-28_a22d4a3f120c00d2af452b72214b1fa9_coinminer_glassworm_icedid_njrat_ryuk_sliver
- Size 3.3MB
- SHA256 b7fafd2ef94d7e2a5fd85959b9eda82393edba368dfd93118b718e99c2f33239
- MD5 a22d4a3f120c00d2af452b72214b1fa9
- SHA1 bf0de9fcf951c0ca31c836cf1ab9e0fb3047ec21
- SHA512 ce9c6e65cb93acd9e1de6ccde796516b54c063d392f3b9383f5f0462130b8f0ae6a1e59439d2f2b4d835f5538a40dc0755f8d3b4b69388d3650a2acaff4902e6
- SSDEEP 49152:ndZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxw5bQ:dHvfGfZvZj1/N/z/owJQ
- TLSH T1BFF58DD2A3A600E8E9B7F23C85568517E7F1B81753709BCF16A44A761F236D12B3E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10