General
- Target 2026-07-31_0be4d5466fa4c08f9b52262e6e2c7021_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
- Size 3.3MB
- Sample260731-pmlw6sshkh
- SHA256 a1e9183d9660fdcbaef50057e85584141b56ce512c2bff73976395acd2e919fd
- MD5 0be4d5466fa4c08f9b52262e6e2c7021
- SHA1 8fa9fc550823e10366151484716c9d983ee56a98
- SHA512 58dc25b733c2a3da83b1f870ac9f4b0e43ffe82a8a5da6c19e0c6dbec65dfdeb5be675d9f9d2d18b232ddc676ceb598dd4b17bf3df9f690c8d5b9b3d9b97c2c2
- SSDEEP 49152:4MSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fJ:9d9AddBcryO3cICgI9J
- TLSH T1BEF57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-31_0be4d5466fa4c08f9b52262e6e2c7021_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_0be4d5466fa4c08f9b52262e6e2c7021_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
vaggelis
Attributes
-
mesh_id
0xA2618E85598DC0810C906C777C437F0FD5D87EE677613035CE88586EEF3ECA5D02BB9A9385479EAE4CDCE0F1D20B3DA9
-
server_id
0B8028B67BEE351E9A27D6DD15551C6771091F37FBB378F4206E9C0A48FB245D34E0C8B1E8426045E49A2C0D9FB1A994
-
wss
localhost
Targets
-
- Target 2026-07-31_0be4d5466fa4c08f9b52262e6e2c7021_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
- Size 3.3MB
- SHA256 a1e9183d9660fdcbaef50057e85584141b56ce512c2bff73976395acd2e919fd
- MD5 0be4d5466fa4c08f9b52262e6e2c7021
- SHA1 8fa9fc550823e10366151484716c9d983ee56a98
- SHA512 58dc25b733c2a3da83b1f870ac9f4b0e43ffe82a8a5da6c19e0c6dbec65dfdeb5be675d9f9d2d18b232ddc676ceb598dd4b17bf3df9f690c8d5b9b3d9b97c2c2
- SSDEEP 49152:4MSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fJ:9d9AddBcryO3cICgI9J
- TLSH T1BEF57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10