General
- Target 2026-07-11_78b2cf863495a576d534442b03312adb_coinminer_glassworm_icedid_njrat_ryuk_sliver
- Size 3.3MB
- Sample260711-mytp2sgw2n
- SHA256 51ed451fb3d9cb797ddce38978bba1ff7b8d10a9ba4631a18a1c865959f68f4e
- MD5 78b2cf863495a576d534442b03312adb
- SHA1 0afec61ee04e29f952afccec902b8d7fcde3703c
- SHA512 b32d9609dc16bb851df1d37dbe20f856583ae09eca5433c704117e6048b3dba7c9effda1fb88ff67345a9eeef2ca562535c5c96ef2ee7b76665e425b730eb969
- SSDEEP 49152:7MSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fP:4d9AddBcryO3cICgI9P
- TLSH T13EF57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-11_78b2cf863495a576d534442b03312adb_coinminer_glassworm_icedid_njrat_ryuk_sliver.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_78b2cf863495a576d534442b03312adb_coinminer_glassworm_icedid_njrat_ryuk_sliver.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
Bilgi İşlem
C2
-
http://10.0.0.35:4443/agent.ashx
Attributes
-
mesh_id
0x5E0C81BC3FCF857CE526100AC42DE36972255AF567B62A7935D866618B8CAFBA791AD6E12DC0C85006BA112BE72CEF3E
-
server_id
4232023CD97155CFC1810E36BC29F09EA0802D0BD9CB9A1D573B7376D2BD50816D931A9A0CDE691CA35A0C5E47BBE627
-
wss
wss://10.0.0.35:4443/agent.ashx
Targets
-
- Target 2026-07-11_78b2cf863495a576d534442b03312adb_coinminer_glassworm_icedid_njrat_ryuk_sliver
- Size 3.3MB
- SHA256 51ed451fb3d9cb797ddce38978bba1ff7b8d10a9ba4631a18a1c865959f68f4e
- MD5 78b2cf863495a576d534442b03312adb
- SHA1 0afec61ee04e29f952afccec902b8d7fcde3703c
- SHA512 b32d9609dc16bb851df1d37dbe20f856583ae09eca5433c704117e6048b3dba7c9effda1fb88ff67345a9eeef2ca562535c5c96ef2ee7b76665e425b730eb969
- SSDEEP 49152:7MSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fP:4d9AddBcryO3cICgI9P
- TLSH T13EF57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10