General
- Target 2026-07-20_57d75da0ee915f1173c5aa6a6123e026_coinminer_glassworm_icedid_njrat_ryuk_sliver
- Size 3.4MB
- Sample260720-rxmbssds8p
- SHA256 b8ba2417c22df4f63adfb5c4bd5b8befeff150bb6392b096f57cd36a1073e459
- MD5 57d75da0ee915f1173c5aa6a6123e026
- SHA1 ce6764951f8e7ceb901c7077257d7ac8600c91f6
- SHA512 1d9529602ddd919503e26ab250a4df3d6a43461d5c44ff88851165f361acc25485cbe17ea61bf0e32e2c884c3ff66648609d3a439ee696975cb767ee8bcf2269
- SSDEEP 49152:8dZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxj5xY:oHvfGfZvZj1/N/z/ojE
- TLSH T124F59DE2A3A600E8E577F23C85568117E7F2B817537097CF16A48A761F236D12B7E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-20_57d75da0ee915f1173c5aa6a6123e026_coinminer_glassworm_icedid_njrat_ryuk_sliver.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_57d75da0ee915f1173c5aa6a6123e026_coinminer_glassworm_icedid_njrat_ryuk_sliver.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
rk
C2
-
http://remotehub.in:443/agent.ashx
Attributes
-
mesh_id
0x2E38C07A4F0A6C13F8DC69A35114276A78F702B31201882DCFBE1CD867F1557C94A3A8D5817F9D5BE8D2212D72FB795A
-
server_id
067869478B15BCBD0328435E66796A6CC8B2A9445576F1AA3BEDD0190EB37FCDD0AB562F7BE64AE1490BB13E08D76982
-
wss
wss://remotehub.in:443/agent.ashx
Targets
-
- Target 2026-07-20_57d75da0ee915f1173c5aa6a6123e026_coinminer_glassworm_icedid_njrat_ryuk_sliver
- Size 3.4MB
- SHA256 b8ba2417c22df4f63adfb5c4bd5b8befeff150bb6392b096f57cd36a1073e459
- MD5 57d75da0ee915f1173c5aa6a6123e026
- SHA1 ce6764951f8e7ceb901c7077257d7ac8600c91f6
- SHA512 1d9529602ddd919503e26ab250a4df3d6a43461d5c44ff88851165f361acc25485cbe17ea61bf0e32e2c884c3ff66648609d3a439ee696975cb767ee8bcf2269
- SSDEEP 49152:8dZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxj5xY:oHvfGfZvZj1/N/z/ojE
- TLSH T124F59DE2A3A600E8E577F23C85568117E7F2B817537097CF16A48A761F236D12B7E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10