General
- Target 2026-06-12_be6c7dae5df784016337ba6de2189df2_coinminer_glassworm_icedid_njrat_ryuk_sliver
- Size 3.3MB
- Sample260612-l4anpact8m
- SHA256 02aae2fc34269b8b8b0eec59e5f9046b8062273e150adb533762e0f4dbe6c26a
- MD5 be6c7dae5df784016337ba6de2189df2
- SHA1 5cb2fbc349b0c23f818c761676ce2bc034414383
- SHA512 7032d47eeddb8d8f0be1a3e211d7525e75b812f5d91f06be1740a41b8acf9842d9048830f9c012f2ecc6d43f378639fc6f9bc7c92ad5e113dbba1acd712d4d88
- SSDEEP 49152:4dZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxw5bn:8HvfGfZvZj1/N/z/owJn
- TLSH T157F58DD2A3A600E8E9B7F23C85568517E7F1B81753709BCF16A44A761F236D12B3E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-12_be6c7dae5df784016337ba6de2189df2_coinminer_glassworm_icedid_njrat_ryuk_sliver.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-12_be6c7dae5df784016337ba6de2189df2_coinminer_glassworm_icedid_njrat_ryuk_sliver.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
Programmers
C2
-
http://rmm.co99.win:443/agent.ashx
Attributes
-
mesh_id
0x4FA51B6CF5E360F586A2F7F9A720673BC2E80C267D479907AC1ED5EEE8709E9062382C65C5FB2AAC38603BAADD560281
-
server_id
5E5F7B057204F5FAD71745CD9B4245AADDB501D26C5B842806455C53CE952A2ED86A5B66CE22EC58B844343406E91AE8
-
wss
wss://rmm.co99.win:443/agent.ashx
Targets
-
- Target 2026-06-12_be6c7dae5df784016337ba6de2189df2_coinminer_glassworm_icedid_njrat_ryuk_sliver
- Size 3.3MB
- SHA256 02aae2fc34269b8b8b0eec59e5f9046b8062273e150adb533762e0f4dbe6c26a
- MD5 be6c7dae5df784016337ba6de2189df2
- SHA1 5cb2fbc349b0c23f818c761676ce2bc034414383
- SHA512 7032d47eeddb8d8f0be1a3e211d7525e75b812f5d91f06be1740a41b8acf9842d9048830f9c012f2ecc6d43f378639fc6f9bc7c92ad5e113dbba1acd712d4d88
- SSDEEP 49152:4dZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxw5bn:8HvfGfZvZj1/N/z/owJn
- TLSH T157F58DD2A3A600E8E9B7F23C85568517E7F1B81753709BCF16A44A761F236D12B3E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10