General
- Target 2026-08-04_4a3a688313888c12b1d202bebd38a31f_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
- Size 3.3MB
- Sample260805-bcg9cabc78
- SHA256 d6f395f3c542d114df0c9797c3f04eb53dffe4855a6941e3f3c86545f0b3f19a
- MD5 4a3a688313888c12b1d202bebd38a31f
- SHA1 8263f9df02d1209243da55df224f924c262150fe
- SHA512 c7a28c1e9f3ae47d79d0123ef2542b268524579cbe645b4dbc6e4a5bbfa314884cec9f720facd36ec32f35bdc527078990f29846b87af02547d4fc802e4aeac8
- SSDEEP 49152:xX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qi:xlRsZ47/QXoHUOfAoj1x6i
- TLSH T1C3F57CD2A7A600E8E977F23C89568517E7F1B81353709BCF15A44A660F236E12B3F712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-04_4a3a688313888c12b1d202bebd38a31f_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_4a3a688313888c12b1d202bebd38a31f_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
TacticalRMM
C2
-
http://mesh-oneal.helpwithweb.com:443/agent.ashx
Attributes
-
mesh_id
0xDB56F91816CECDBBF1C357B504CDDF58DC4D86FD296BB0F91BCA097BC2ACB50F0A02EF81495D8EB6E06DAD1C6C7A9EEA
-
server_id
AC4A4F9424172E32006D55B8B746CFE37E9A93C3586A3A43F02878F82AF872AC0066C841E1CCA77A199B7F102556BCB3
-
wss
wss://mesh-oneal.helpwithweb.com:443/agent.ashx
Targets
-
- Target 2026-08-04_4a3a688313888c12b1d202bebd38a31f_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
- Size 3.3MB
- SHA256 d6f395f3c542d114df0c9797c3f04eb53dffe4855a6941e3f3c86545f0b3f19a
- MD5 4a3a688313888c12b1d202bebd38a31f
- SHA1 8263f9df02d1209243da55df224f924c262150fe
- SHA512 c7a28c1e9f3ae47d79d0123ef2542b268524579cbe645b4dbc6e4a5bbfa314884cec9f720facd36ec32f35bdc527078990f29846b87af02547d4fc802e4aeac8
- SSDEEP 49152:xX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qi:xlRsZ47/QXoHUOfAoj1x6i
- TLSH T1C3F57CD2A7A600E8E977F23C89568517E7F1B81353709BCF15A44A660F236E12B3F712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10