General
- Target 2026-08-03_dae50e827b0047bf50baa9d4a6f3d32b_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
- Size 3.3MB
- Sample260804-lc438abr8y
- SHA256 56f8c0490ac0fec2824d21643e39904599193ad9f4e9053bc02619fb891f3d65
- MD5 dae50e827b0047bf50baa9d4a6f3d32b
- SHA1 896d8a54c9c5fe4adbfcbe33f90f6637a9851f4a
- SHA512 92ab0794b72f3fc0c465af8a3b5a59ed3ddc45013b5138578d442c79082ab29e9d00e762df83703bfeebbb0f7536546a0a86e44900d1f97340d884b84633b0dc
- SSDEEP 49152:+MSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fa:nd9AddBcryO3cICgI9a
- TLSH T198F57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-03_dae50e827b0047bf50baa9d4a6f3d32b_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_dae50e827b0047bf50baa9d4a6f3d32b_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Resource
win11ltsc2024-20260710-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
TacticalRMM
C2
-
http://mesh.gustavodev.xyz:443/agent.ashx
Attributes
-
mesh_id
0x7EAF7A9AA1AFE450BEA83C5E39DC7AD409AA62FEFDD6A5084C3F04F9917A45999F6123DF80029D5399BA190BB9FC8434
-
server_id
1A17DAD0D5219707D8BF67614FEA6E55BBBC60D4AFF42FE84BE8B0F9D08FB522E1A7698EEB1BA03A1B1DC4AB651BBC2F
-
wss
wss://mesh.gustavodev.xyz:443/agent.ashx
Targets
-
- Target 2026-08-03_dae50e827b0047bf50baa9d4a6f3d32b_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
- Size 3.3MB
- SHA256 56f8c0490ac0fec2824d21643e39904599193ad9f4e9053bc02619fb891f3d65
- MD5 dae50e827b0047bf50baa9d4a6f3d32b
- SHA1 896d8a54c9c5fe4adbfcbe33f90f6637a9851f4a
- SHA512 92ab0794b72f3fc0c465af8a3b5a59ed3ddc45013b5138578d442c79082ab29e9d00e762df83703bfeebbb0f7536546a0a86e44900d1f97340d884b84633b0dc
- SSDEEP 49152:+MSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fa:nd9AddBcryO3cICgI9a
- TLSH T198F57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10