General
- Target 2026-07-28_52fdb28946e51fb556c640fb4e1b58bb_coinminer_glassworm_icedid_njrat_ryuk_sliver
- Size 3.3MB
- Sample260729-bl5q1add24
- SHA256 55c23b6e95ed09f55e04d16d8eb8421460e10b189616ef939d6ada5b795527f0
- MD5 52fdb28946e51fb556c640fb4e1b58bb
- SHA1 791715f32f2706364425757859a49e5159325c87
- SHA512 4bfa87ccfecc04a1f38d60da9fbc3a5226ebe4d25c366117d73ecd5db5108a86b40c64c69583222d1a3e5cd7a75d46203f6450d0426734ac80e3e47fbc23030b
- SSDEEP 49152:qX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QU:qlRsZ47/QXoHUOfAoj1x6U
- TLSH T18EF57CD2A7A600E8E977F23C89568517E7F1B81353709BCF15A44A660F236E12B3F712
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-28_52fdb28946e51fb556c640fb4e1b58bb_coinminer_glassworm_icedid_njrat_ryuk_sliver.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_52fdb28946e51fb556c640fb4e1b58bb_coinminer_glassworm_icedid_njrat_ryuk_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
Home
Attributes
-
mesh_id
0xC1A89830A2C380A747A6F169E88E566453C545C97A82C5FB68BC4FED5E09D9B87E8119D274313C72E900AF4CAB5188AF
-
server_id
3FB66649D462618BEC7E7E3670FA335951AF616ECC29AC99BB4F39FCB7F72750F3C5EB23A89D34FD999550957CAD336C
-
wss
localhost
Targets
-
- Target 2026-07-28_52fdb28946e51fb556c640fb4e1b58bb_coinminer_glassworm_icedid_njrat_ryuk_sliver
- Size 3.3MB
- SHA256 55c23b6e95ed09f55e04d16d8eb8421460e10b189616ef939d6ada5b795527f0
- MD5 52fdb28946e51fb556c640fb4e1b58bb
- SHA1 791715f32f2706364425757859a49e5159325c87
- SHA512 4bfa87ccfecc04a1f38d60da9fbc3a5226ebe4d25c366117d73ecd5db5108a86b40c64c69583222d1a3e5cd7a75d46203f6450d0426734ac80e3e47fbc23030b
- SSDEEP 49152:qX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QU:qlRsZ47/QXoHUOfAoj1x6U
- TLSH T18EF57CD2A7A600E8E977F23C89568517E7F1B81353709BCF15A44A660F236E12B3F712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10