General
- Target 2026-07-01_69a69c8ee9ccc497cd0aa4ccd3bc231e_coinminer_glassworm_icedid_njrat_ryuk_sliver
- Size 3.3MB
- Sample260701-b8l76scs3j
- SHA256 b3231671fa21b9ce2ec8210f4728ae5549f28e98cf8dde9beace2b23dbae444f
- MD5 69a69c8ee9ccc497cd0aa4ccd3bc231e
- SHA1 d659eaddf4c9c237bc60a6e009e5eea3a3d885da
- SHA512 8ea1e1ba75fc7b6b9e02b419fc800e3de02ce8a06177d4d169d7f151e3c0f485108807bfa231ab1013ee0bdf7c04170b81ee8b16e8d445b133ec86e2b2ecb7f1
- SSDEEP 49152:uMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fX:Xd9AddBcryO3cICgI9X
- TLSH T13BF57CD2A7A600E8E977F23CC5568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-01_69a69c8ee9ccc497cd0aa4ccd3bc231e_coinminer_glassworm_icedid_njrat_ryuk_sliver.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_69a69c8ee9ccc497cd0aa4ccd3bc231e_coinminer_glassworm_icedid_njrat_ryuk_sliver.exe
Resource
win11ltsc2024-20260629-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
TM 03
C2
-
http://mesh.tacomayo.com:4443/agent.ashx
Attributes
-
mesh_id
0xA8EA2691AABB73842F4D6CC98528B5CA25650F78C91F5329D94D56103781454C4853A33E910AFFC4D94E4284C319ED8C
-
server_id
E96BE3E197438CD36F692100254EE635FC328781AD404ACB8B7E59A694BE0B6BE900B8EC1E85DEFF6A0B825A88A90428
-
wss
wss://mesh.tacomayo.com:4443/agent.ashx
Targets
-
- Target 2026-07-01_69a69c8ee9ccc497cd0aa4ccd3bc231e_coinminer_glassworm_icedid_njrat_ryuk_sliver
- Size 3.3MB
- SHA256 b3231671fa21b9ce2ec8210f4728ae5549f28e98cf8dde9beace2b23dbae444f
- MD5 69a69c8ee9ccc497cd0aa4ccd3bc231e
- SHA1 d659eaddf4c9c237bc60a6e009e5eea3a3d885da
- SHA512 8ea1e1ba75fc7b6b9e02b419fc800e3de02ce8a06177d4d169d7f151e3c0f485108807bfa231ab1013ee0bdf7c04170b81ee8b16e8d445b133ec86e2b2ecb7f1
- SSDEEP 49152:uMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fX:Xd9AddBcryO3cICgI9X
- TLSH T13BF57CD2A7A600E8E977F23CC5568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10