General
- Target 2026-07-12_980b1b273b67511d42800e182a16ee2b_coinminer_glassworm_icedid_njrat_ryuk_sliver
- Size 3.3MB
- Sample260712-pel7zabw2v
- SHA256 02d296c6a80573319b01a5f8cf06fa0d6f5889d0e60ef12e582d1ff4e7c8c84b
- MD5 980b1b273b67511d42800e182a16ee2b
- SHA1 343e187453919e64f03e32196e0366357157ee7b
- SHA512 f62f233298311226011756ae1f98155ad5e1041efa440856b7b0fd30565731eef984e2d1d135a7b5ce2d4d42b2a92550b01e1376668e2837e6c3a475c7efdd2f
- SSDEEP 49152:zMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlb5PN:Ad9AddBcryO3cICgbxN
- TLSH T1E5F57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-12_980b1b273b67511d42800e182a16ee2b_coinminer_glassworm_icedid_njrat_ryuk_sliver.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_980b1b273b67511d42800e182a16ee2b_coinminer_glassworm_icedid_njrat_ryuk_sliver.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
zmrr
C2
-
http://screen2me.online:443/agent.ashx
Attributes
-
mesh_id
0x91E49899A11EF24D32D33BF288FF9929BB7D0FACDF2EBC772DDB5D82420575B55E8CDBEA8BB2ACBAF27B32C80885F41F
-
server_id
EDB5E0B3F272F99B818A9EA5DC4440FA07125E790EFF3DA802E03CF896EE7C392FD76E93839C8346012D1656AFC75158
-
wss
wss://screen2me.online:443/agent.ashx
Targets
-
- Target 2026-07-12_980b1b273b67511d42800e182a16ee2b_coinminer_glassworm_icedid_njrat_ryuk_sliver
- Size 3.3MB
- SHA256 02d296c6a80573319b01a5f8cf06fa0d6f5889d0e60ef12e582d1ff4e7c8c84b
- MD5 980b1b273b67511d42800e182a16ee2b
- SHA1 343e187453919e64f03e32196e0366357157ee7b
- SHA512 f62f233298311226011756ae1f98155ad5e1041efa440856b7b0fd30565731eef984e2d1d135a7b5ce2d4d42b2a92550b01e1376668e2837e6c3a475c7efdd2f
- SSDEEP 49152:zMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlb5PN:Ad9AddBcryO3cICgbxN
- TLSH T1E5F57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10