General
- Target 2026-06-27_1b0ba42ff5ab922f1eea2d1f5d952845_coinminer_glassworm_icedid_njrat_ryuk_sliver
- Size 3.3MB
- Sample260629-ljvs5ab13p
- SHA256 380866a37f2c2867e9b13df9480b6e3f185a692a579ff8fca4eab77daa059619
- MD5 1b0ba42ff5ab922f1eea2d1f5d952845
- SHA1 d15cc8ebb72255abc61476fa90790c39a124728d
- SHA512 8d2cc0f3df48c04eb9932a9b415f12e8785fc1d3cf68729c5e735347a20c187fc68980a90d30303377fbf2467786d54f105daccb9e82f5649554a677fd12b5b9
- SSDEEP 49152:iMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5f2:Dd9AddBcryO3cICgI92
- TLSH T1B8F57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-27_1b0ba42ff5ab922f1eea2d1f5d952845_coinminer_glassworm_icedid_njrat_ryuk_sliver.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_1b0ba42ff5ab922f1eea2d1f5d952845_coinminer_glassworm_icedid_njrat_ryuk_sliver.exe
Resource
win11ltsc2024-20260618-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
Paints & Coatings
Attributes
-
mesh_id
0x39A38397B10B57F719D7C4568B0F32F1AA4099E924C1D449E4E838274AC63EB016666DE0BDDC6FEE2E0FC69723E4946B
-
server_id
644775302CDD27424149B072B9DA8B0B059910179522C2AFBA3B912A50A13BF8A65CF88A65CBF5B787A91B501A9FDCB5
-
wss
localhost
Targets
-
- Target 2026-06-27_1b0ba42ff5ab922f1eea2d1f5d952845_coinminer_glassworm_icedid_njrat_ryuk_sliver
- Size 3.3MB
- SHA256 380866a37f2c2867e9b13df9480b6e3f185a692a579ff8fca4eab77daa059619
- MD5 1b0ba42ff5ab922f1eea2d1f5d952845
- SHA1 d15cc8ebb72255abc61476fa90790c39a124728d
- SHA512 8d2cc0f3df48c04eb9932a9b415f12e8785fc1d3cf68729c5e735347a20c187fc68980a90d30303377fbf2467786d54f105daccb9e82f5649554a677fd12b5b9
- SSDEEP 49152:iMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5f2:Dd9AddBcryO3cICgI92
- TLSH T1B8F57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10