General
- Target 2026-07-14_3749acd665b8813e768cbc15d31d19d3_coinminer_glassworm_icedid_njrat_ryuk_sliver
- Size 3.3MB
- Sample260715-bcbfssbt8x
- SHA256 b4a48ea3266cc387795a54e50b306a087f8cfdef84759c86af109b3fbd020095
- MD5 3749acd665b8813e768cbc15d31d19d3
- SHA1 40663d66051b72a054c001272cb17411d981fdb8
- SHA512 7078c8ddce4bd9523b7a62520bf9c368340b07084dece3956859dc4165528e65cc0d5d37ba4eb8ef2ee37d76a20b93bad16462db89af072a9e784998e6ea8463
- SSDEEP 49152:iMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fy:Dd9AddBcryO3cICgI9y
- TLSH T1D4F57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-14_3749acd665b8813e768cbc15d31d19d3_coinminer_glassworm_icedid_njrat_ryuk_sliver.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_3749acd665b8813e768cbc15d31d19d3_coinminer_glassworm_icedid_njrat_ryuk_sliver.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
NT
C2
-
http://www.intranetntplc.com:443/agent.ashx
Attributes
-
mesh_id
0x69295FF21F76E4D6880FF180D4BF46B3DCF38379B45A5C7D9F874230FDD1FCE8269818393302ACA0C08372890D6D395A
-
server_id
FD7E0B386F6D04C24CF4496014C40FE819888218959BBE6D1459D10EAD7C273AC2D44A33AA0F8845AB46619029DE484B
-
wss
wss://www.intranetntplc.com:443/agent.ashx
Targets
-
- Target 2026-07-14_3749acd665b8813e768cbc15d31d19d3_coinminer_glassworm_icedid_njrat_ryuk_sliver
- Size 3.3MB
- SHA256 b4a48ea3266cc387795a54e50b306a087f8cfdef84759c86af109b3fbd020095
- MD5 3749acd665b8813e768cbc15d31d19d3
- SHA1 40663d66051b72a054c001272cb17411d981fdb8
- SHA512 7078c8ddce4bd9523b7a62520bf9c368340b07084dece3956859dc4165528e65cc0d5d37ba4eb8ef2ee37d76a20b93bad16462db89af072a9e784998e6ea8463
- SSDEEP 49152:iMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fy:Dd9AddBcryO3cICgI9y
- TLSH T1D4F57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10