General
- Target 2026-06-10_f00b04f53c9a84d980bceffdae8efab0_coinminer_glassworm_icedid_njrat_ryuk_sliver
- Size 3.3MB
- Sample260610-mf75qaav7m
- SHA256 ea1ad8362fb6bcd28727dc445eacb0af54fe6cf6ea2ee8738041082d2a51f442
- MD5 f00b04f53c9a84d980bceffdae8efab0
- SHA1 dfc781f7ca6f7915f6f9fbae672db0c5955ec444
- SHA512 cb04b6383b448b581560a3c8e33a99b7a6083ef293f5dec14fd23e43c285863f8bb5f7665483b9a7bbfe15aee0fd3a0e5244989da6a29e4f0b26b0e299abb0dd
- SSDEEP 49152:NdZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxw5b8:vHvfGfZvZj1/N/z/owJ8
- TLSH T115F58DD2A3A600E8E9B7F23C85568517E7F2B81753709BCF15A44A761F236D12B3E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-10_f00b04f53c9a84d980bceffdae8efab0_coinminer_glassworm_icedid_njrat_ryuk_sliver.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-10_f00b04f53c9a84d980bceffdae8efab0_coinminer_glassworm_icedid_njrat_ryuk_sliver.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
AISense
C2
-
http://disoftec.synology.me:1025/agent.ashx
Attributes
-
mesh_id
0x6C5A69111B13448455096B41930771D81BBDBD43AFF40051185B177B7D4B607CEF7B4F007A26F52B9F1DF2A5A3EDFA3A
-
server_id
9CC5BDEAA33939C959D155F0CD8BB2A9E735D0E5210A268D005A29499FC89236128226DD9B75B6DBE169F50E8190945C
-
wss
wss://disoftec.synology.me:1025/agent.ashx
Targets
-
- Target 2026-06-10_f00b04f53c9a84d980bceffdae8efab0_coinminer_glassworm_icedid_njrat_ryuk_sliver
- Size 3.3MB
- SHA256 ea1ad8362fb6bcd28727dc445eacb0af54fe6cf6ea2ee8738041082d2a51f442
- MD5 f00b04f53c9a84d980bceffdae8efab0
- SHA1 dfc781f7ca6f7915f6f9fbae672db0c5955ec444
- SHA512 cb04b6383b448b581560a3c8e33a99b7a6083ef293f5dec14fd23e43c285863f8bb5f7665483b9a7bbfe15aee0fd3a0e5244989da6a29e4f0b26b0e299abb0dd
- SSDEEP 49152:NdZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxw5b8:vHvfGfZvZj1/N/z/owJ8
- TLSH T115F58DD2A3A600E8E9B7F23C85568517E7F2B81753709BCF15A44A761F236D12B3E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10