General
- Target 2026-06-27_5ce81719b17b1497288680cf8c80045b_coinminer_glassworm_icedid_njrat_ryuk
- Size 3.3MB
- Sample260629-hrvljsfw71
- SHA256 97f11b55e7ed7d9bac066c78def54704cc651246a98bb4fa36f2d12167d5cf7b
- MD5 5ce81719b17b1497288680cf8c80045b
- SHA1 23b780123cb1b74816218ae6b99f86d64593b49f
- SHA512 41309f869552508b060459fa75838288179abf6a75598a7bb12ff9757648899e40723d09e7fc7383c4f28aa21a65b67858004e7be7ac40ec6edcdf1db5519612
- SSDEEP 49152:5X3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QI:5lRsZ47/QXoHUOfAoj1x6I
- TLSH T1DEF57CD2A7A600E8E977F23C89568517E7F1B81353709BCF15A44A660F236E12B3F712
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-27_5ce81719b17b1497288680cf8c80045b_coinminer_glassworm_icedid_njrat_ryuk.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_5ce81719b17b1497288680cf8c80045b_coinminer_glassworm_icedid_njrat_ryuk.exe
Resource
win11ltsc2024-20260617-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
NT
C2
-
http://www.intranetntplc.com:443/agent.ashx
Attributes
-
mesh_id
0x69295FF21F76E4D6880FF180D4BF46B3DCF38379B45A5C7D9F874230FDD1FCE8269818393302ACA0C08372890D6D395A
-
server_id
FD7E0B386F6D04C24CF4496014C40FE819888218959BBE6D1459D10EAD7C273AC2D44A33AA0F8845AB46619029DE484B
-
wss
wss://www.intranetntplc.com:443/agent.ashx
Targets
-
- Target 2026-06-27_5ce81719b17b1497288680cf8c80045b_coinminer_glassworm_icedid_njrat_ryuk
- Size 3.3MB
- SHA256 97f11b55e7ed7d9bac066c78def54704cc651246a98bb4fa36f2d12167d5cf7b
- MD5 5ce81719b17b1497288680cf8c80045b
- SHA1 23b780123cb1b74816218ae6b99f86d64593b49f
- SHA512 41309f869552508b060459fa75838288179abf6a75598a7bb12ff9757648899e40723d09e7fc7383c4f28aa21a65b67858004e7be7ac40ec6edcdf1db5519612
- SSDEEP 49152:5X3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QI:5lRsZ47/QXoHUOfAoj1x6I
- TLSH T1DEF57CD2A7A600E8E977F23C89568517E7F1B81353709BCF15A44A660F236E12B3F712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10