General
- Target 2026-07-11_74eb46689659c6a65ef780595e4ee5d7_coinminer_glassworm_icedid_njrat_ryuk_sliver
- Size 3.3MB
- Sample260711-e4nrzsbw5p
- SHA256 00f7234f9eaf8d08c67b7d4f81ded21ac9db81c2a1418e276de60651981a0627
- MD5 74eb46689659c6a65ef780595e4ee5d7
- SHA1 f62346ea33408299321060e067a9d43e0ff5a018
- SHA512 710efd4b29084cc741ac68fafeef4fe7f3767b068b1b3d6fe8c3e93f35cd0a2e631d39daa1d7fb56c3d6073465d050fd9502b3083decec5daef7a0aacdb3b4b2
- SSDEEP 49152:PMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5Pg:kd9AddBcryO3cICgIxg
- TLSH T1A4F57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-11_74eb46689659c6a65ef780595e4ee5d7_coinminer_glassworm_icedid_njrat_ryuk_sliver.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_74eb46689659c6a65ef780595e4ee5d7_coinminer_glassworm_icedid_njrat_ryuk_sliver.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
group1
C2
-
http://mesh.fleetnode.net:443/agent.ashx
Attributes
-
mesh_id
0x6D31EF9AC4B492735C1E53E45473E921CFF58B2DF77A6427A958B2E8C1FD14B5F83F718695BF6E10E9611814B4C9D61B
-
server_id
C2CEB7D035498AA824141CC731E86FE0F27B3484A405D19C17CF0B763E10FEB9FDB6E854AC5ABF6F7A2FE99E2C235456
-
wss
wss://mesh.fleetnode.net:443/agent.ashx
Targets
-
- Target 2026-07-11_74eb46689659c6a65ef780595e4ee5d7_coinminer_glassworm_icedid_njrat_ryuk_sliver
- Size 3.3MB
- SHA256 00f7234f9eaf8d08c67b7d4f81ded21ac9db81c2a1418e276de60651981a0627
- MD5 74eb46689659c6a65ef780595e4ee5d7
- SHA1 f62346ea33408299321060e067a9d43e0ff5a018
- SHA512 710efd4b29084cc741ac68fafeef4fe7f3767b068b1b3d6fe8c3e93f35cd0a2e631d39daa1d7fb56c3d6073465d050fd9502b3083decec5daef7a0aacdb3b4b2
- SSDEEP 49152:PMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5Pg:kd9AddBcryO3cICgIxg
- TLSH T1A4F57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10