General
- Target 2026-07-20_dd14cf9b37ca43cdb31c5ae1100b0dff_coinminer_glassworm_icedid_njrat_ryuk_sliver
- Size 3.3MB
- Sample260720-m9d4qsas3y
- SHA256 066759c06cb780ebb78ce618dbadb8173a288545a76afebe32a4687110c9222e
- MD5 dd14cf9b37ca43cdb31c5ae1100b0dff
- SHA1 ee0d9b8d747c09900a3d821b2c105d0677ce7308
- SHA512 3bf810fea60b7274f51423d7443cd368f710224d713c45d898704de18267ba9e40b3882872de244454df36e2649d5e93aff200365b13eaba756c9a45a3431666
- SSDEEP 49152:/dZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxw5b2:FHvfGfZvZj1/N/z/owJ2
- TLSH T141F58DD2A3A600E8E9B7F23C85568517E7F2B81753709BCF15A44A761F236D12B3E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-20_dd14cf9b37ca43cdb31c5ae1100b0dff_coinminer_glassworm_icedid_njrat_ryuk_sliver.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_dd14cf9b37ca43cdb31c5ae1100b0dff_coinminer_glassworm_icedid_njrat_ryuk_sliver.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
Office
C2
-
http://172.16.36.6:443/agent.ashx
Attributes
-
mesh_id
0x11F991921FCACBC63CBF519ED1D959E2FEE849D5E639E94E60012A820C6BAC303609D14DA8E3008FDC128B9428105BF7
-
server_id
FA4AD187E3CB84E674A997FC89A346DB4686FB19C0028767E6AB45144A5B0B03130C1AEAEDE0E541B6457AF4CE742694
-
wss
wss://172.16.36.6:443/agent.ashx
Targets
-
- Target 2026-07-20_dd14cf9b37ca43cdb31c5ae1100b0dff_coinminer_glassworm_icedid_njrat_ryuk_sliver
- Size 3.3MB
- SHA256 066759c06cb780ebb78ce618dbadb8173a288545a76afebe32a4687110c9222e
- MD5 dd14cf9b37ca43cdb31c5ae1100b0dff
- SHA1 ee0d9b8d747c09900a3d821b2c105d0677ce7308
- SHA512 3bf810fea60b7274f51423d7443cd368f710224d713c45d898704de18267ba9e40b3882872de244454df36e2649d5e93aff200365b13eaba756c9a45a3431666
- SSDEEP 49152:/dZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxw5b2:FHvfGfZvZj1/N/z/owJ2
- TLSH T141F58DD2A3A600E8E9B7F23C85568517E7F2B81753709BCF15A44A761F236D12B3E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10