General
- Target 2026-07-20_51ff28af51674488390a87d67d4cc343_coinminer_glassworm_icedid_njrat_ryuk_sliver
- Size 3.3MB
- Sample260720-ryaz6aft4t
- SHA256 2c4f91a9fa80cb61b9533954e8b1e414730d1a688509916353bf29b8ae0d7a10
- MD5 51ff28af51674488390a87d67d4cc343
- SHA1 edbd11cde3557606a13fe0535da73682f7a5c30f
- SHA512 f840be29f998c7da9190ac172ebe32bd872ceb31a2faee0a4b3bcbdcb2d30aa0dfe218dd707b18d00e855fbd81ed2b89a9a7a5e629a0ba9bd15663f143eed9a7
- SSDEEP 49152:vdZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxw5br:VHvfGfZvZj1/N/z/owJr
- TLSH T119F58DD2A3A600E8E9B7F23C85568517E7F2B81753709BCF15A44A761F236D12B3E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-20_51ff28af51674488390a87d67d4cc343_coinminer_glassworm_icedid_njrat_ryuk_sliver.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_51ff28af51674488390a87d67d4cc343_coinminer_glassworm_icedid_njrat_ryuk_sliver.exe
Resource
win11ltsc2024-20260710-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
My
C2
-
http://144.172.106.60:443/agent.ashx
Attributes
-
mesh_id
0xDABB01186B4408312A51E38B4B38A607766C361BA33AA535C67E27AD863B44866D07099D8AA5DC938D9A36D1ED330398
-
server_id
AF71EB3F62C205EF862CE83E0A9E846212BBF1773BEECDCA290084C73B59A45A25AB30C8778EC87E262AA850CB7CBB7B
-
wss
wss://144.172.106.60:443/agent.ashx
Targets
-
- Target 2026-07-20_51ff28af51674488390a87d67d4cc343_coinminer_glassworm_icedid_njrat_ryuk_sliver
- Size 3.3MB
- SHA256 2c4f91a9fa80cb61b9533954e8b1e414730d1a688509916353bf29b8ae0d7a10
- MD5 51ff28af51674488390a87d67d4cc343
- SHA1 edbd11cde3557606a13fe0535da73682f7a5c30f
- SHA512 f840be29f998c7da9190ac172ebe32bd872ceb31a2faee0a4b3bcbdcb2d30aa0dfe218dd707b18d00e855fbd81ed2b89a9a7a5e629a0ba9bd15663f143eed9a7
- SSDEEP 49152:vdZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxw5br:VHvfGfZvZj1/N/z/owJr
- TLSH T119F58DD2A3A600E8E9B7F23C85568517E7F2B81753709BCF15A44A761F236D12B3E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10