General
- Target 2026-07-22_8af36ba297e12ce77acbdafcdd9eeec1_coinminer_glassworm_icedid_njrat_ryuk_sliver
- Size 3.3MB
- Sample260722-3l5jsaxamd
- SHA256 943c28e45c9f752e10eb62bd03515abfdef2ce8d1f5430fc8c9a602f9e1f585a
- MD5 8af36ba297e12ce77acbdafcdd9eeec1
- SHA1 c4378b63d5a53ca123b3b2fbb74ad02850ad5a98
- SHA512 c8d666b0a8ead4a78e74a5f273838843c539bb052ae2b849611ed5b9c9072407f0cc00c8342605112b071a134782df3770e2857ed9f878035b00106c3a004573
- SSDEEP 49152:kdZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxf5u:AHvfGfZvZj1/N/z/ofM
- TLSH T1C1F58CD2A3A600E8E9B7F23C85568517E7F1B81753709BCF16A44A760F236D12B7E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-22_8af36ba297e12ce77acbdafcdd9eeec1_coinminer_glassworm_icedid_njrat_ryuk_sliver.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_8af36ba297e12ce77acbdafcdd9eeec1_coinminer_glassworm_icedid_njrat_ryuk_sliver.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
Geek
C2
-
http://rc.raresoft.net:443/agent.ashx
Attributes
-
mesh_id
0x48D9F0B390781221661CF996BB71B4F5A69E062560121380CB6AE0DD93638231B0448FA0156CFD7116C5936A177DB1BB
-
server_id
B4C461F5212E66E4A60664ED4C8C6C49498624FA92EE9B7D9AED1F693322EAB16B501C9FBBE9CD1E643D19F2B01D2E25
-
wss
wss://rc.raresoft.net:443/agent.ashx
Targets
-
- Target 2026-07-22_8af36ba297e12ce77acbdafcdd9eeec1_coinminer_glassworm_icedid_njrat_ryuk_sliver
- Size 3.3MB
- SHA256 943c28e45c9f752e10eb62bd03515abfdef2ce8d1f5430fc8c9a602f9e1f585a
- MD5 8af36ba297e12ce77acbdafcdd9eeec1
- SHA1 c4378b63d5a53ca123b3b2fbb74ad02850ad5a98
- SHA512 c8d666b0a8ead4a78e74a5f273838843c539bb052ae2b849611ed5b9c9072407f0cc00c8342605112b071a134782df3770e2857ed9f878035b00106c3a004573
- SSDEEP 49152:kdZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxf5u:AHvfGfZvZj1/N/z/ofM
- TLSH T1C1F58CD2A3A600E8E9B7F23C85568517E7F1B81753709BCF16A44A760F236D12B7E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10