General
- Target 2026-07-28_80e88f43b42fbb136c82ffbbf032daea_coinminer_glassworm_icedid_njrat_ryuk_sliver
- Size 3.3MB
- Sample260728-te4jgaaa93
- SHA256 f19515ea0b62872059d8e9fb9d61ede140a24ac718bb52ddf32d73e51cc8e1b2
- MD5 80e88f43b42fbb136c82ffbbf032daea
- SHA1 90efe156d489186e6effe481566ac9a89497a632
- SHA512 01df41ece96e899b54f28bd6d1cee55dc55e21794f36355fe656946533aa12e686e8cdaad25df33d59644ce0354f65eef540a4996b6d3fd33978be60f997cfe9
- SSDEEP 49152:udZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxw5be:+HvfGfZvZj1/N/z/owJe
- TLSH T11BF58DD2A3A600E8E9B7F23C85568517E7F2B81753709BCF15A44A761F236D12B3E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-28_80e88f43b42fbb136c82ffbbf032daea_coinminer_glassworm_icedid_njrat_ryuk_sliver.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_80e88f43b42fbb136c82ffbbf032daea_coinminer_glassworm_icedid_njrat_ryuk_sliver.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
PC
C2
-
http://mesh.warptemplar.ru:443/agent.ashx
Attributes
-
mesh_id
0xD4306C3E0C9FD9869FDF829DD31C69CDF36701EAC400610AB5B1567B7C16089C474CE6E5861049730E6D3D9ACF047107
-
server_id
1877B93375E2D1D1F2E61418D7E801E5B9D34CC912FB62FD6FEE25D0702DA873599DBB7B211B670A0590E0CA4F5C414B
-
wss
wss://mesh.warptemplar.ru:443/agent.ashx
Targets
-
- Target 2026-07-28_80e88f43b42fbb136c82ffbbf032daea_coinminer_glassworm_icedid_njrat_ryuk_sliver
- Size 3.3MB
- SHA256 f19515ea0b62872059d8e9fb9d61ede140a24ac718bb52ddf32d73e51cc8e1b2
- MD5 80e88f43b42fbb136c82ffbbf032daea
- SHA1 90efe156d489186e6effe481566ac9a89497a632
- SHA512 01df41ece96e899b54f28bd6d1cee55dc55e21794f36355fe656946533aa12e686e8cdaad25df33d59644ce0354f65eef540a4996b6d3fd33978be60f997cfe9
- SSDEEP 49152:udZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxw5be:+HvfGfZvZj1/N/z/owJe
- TLSH T11BF58DD2A3A600E8E9B7F23C85568517E7F2B81753709BCF15A44A761F236D12B3E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10