General
- Target 2026-07-26_58d1632db03ee15f27982db0ab57d493_coinminer_glassworm_icedid_njrat_ryuk_sliver
- Size 3.3MB
- Sample260726-kkrx7adn8y
- SHA256 ff13160e20f9f1f51a10fd16a7c183f82a36d6f443d8fbf0640f744205250fef
- MD5 58d1632db03ee15f27982db0ab57d493
- SHA1 ac351eb6dea28348f84ab1779ffc3dbed18fe8ab
- SHA512 821472a82e5821fe031a1743d013c3ad9f834289e9fd65c88b89aeb0f9e9dbd97688f2e5e9ff13b24772ccf3643027d63cf0b7b18780cb9065966d13fb6e5768
- SSDEEP 49152:rX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QU:rlRsZ47/QXoHUOfAoj1x6U
- TLSH T14EF57CD2A7A600E8E977F23C89568517E7F1B81353709BCF15A44A660F236E12B3F712
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-26_58d1632db03ee15f27982db0ab57d493_coinminer_glassworm_icedid_njrat_ryuk_sliver.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-26_58d1632db03ee15f27982db0ab57d493_coinminer_glassworm_icedid_njrat_ryuk_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
SERVERS
Attributes
-
mesh_id
0x185335C7E3173D0A199993A9141858C8BD2D3C2D0F21A5C10ACEBF000FDD718059C5B68DFF0EFEA6CABA451CE4A5A2F7
-
server_id
AC68CEE538708DAF42BCA79E3D2C07818972E07E0E93AC1D7A0FE6BEED3CE5AD2E8EAA8858103B3F29B3E19335FF8CB8
-
wss
localhost
Targets
-
- Target 2026-07-26_58d1632db03ee15f27982db0ab57d493_coinminer_glassworm_icedid_njrat_ryuk_sliver
- Size 3.3MB
- SHA256 ff13160e20f9f1f51a10fd16a7c183f82a36d6f443d8fbf0640f744205250fef
- MD5 58d1632db03ee15f27982db0ab57d493
- SHA1 ac351eb6dea28348f84ab1779ffc3dbed18fe8ab
- SHA512 821472a82e5821fe031a1743d013c3ad9f834289e9fd65c88b89aeb0f9e9dbd97688f2e5e9ff13b24772ccf3643027d63cf0b7b18780cb9065966d13fb6e5768
- SSDEEP 49152:rX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QU:rlRsZ47/QXoHUOfAoj1x6U
- TLSH T14EF57CD2A7A600E8E977F23C89568517E7F1B81353709BCF15A44A660F236E12B3F712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10