General
- Target 2026-08-09_51f97258c5fcc44d3229acf388d3dcb1_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
- Size 3.3MB
- Sample260809-bq8y8axgrh
- SHA256 60b66d8a4f83d16184e92671f14945d39f3029ef008819e0daafd096c05798ca
- MD5 51f97258c5fcc44d3229acf388d3dcb1
- SHA1 ac3b3cee9c9df719bb06b831530b0807a730ec17
- SHA512 1a472a40bc8fd95197cfeb834d87f5a3272cbeec45835c6ac1cc9b198f8b7d4e3037173273eb6072f6991a06072a3956e2083ad1f8725ee5033b6cc6547e3159
- SSDEEP 49152:WMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fz:vd9AddBcryO3cICgI9z
- TLSH T1DEF57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-09_51f97258c5fcc44d3229acf388d3dcb1_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_51f97258c5fcc44d3229acf388d3dcb1_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
Staff
C2
-
http://mesh.estesfinancial.internal:8080/agent.ashx
Attributes
-
mesh_id
0xF260AA8510D12D73D9D502D6C4BAB39899325B282013BAA03FE9F9E7EF54DAA07CAD827AF3DE18A51D9E4544057793C8
-
server_id
3EF315F72B13FF09B89ADBA7B4E6B2DE164B0C04BB216FBCD4981A70CB16DD06C2D32173612488C66F9ABD7B274E4E71
-
wss
wss://mesh.estesfinancial.internal:8080/agent.ashx
Targets
-
- Target 2026-08-09_51f97258c5fcc44d3229acf388d3dcb1_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
- Size 3.3MB
- SHA256 60b66d8a4f83d16184e92671f14945d39f3029ef008819e0daafd096c05798ca
- MD5 51f97258c5fcc44d3229acf388d3dcb1
- SHA1 ac3b3cee9c9df719bb06b831530b0807a730ec17
- SHA512 1a472a40bc8fd95197cfeb834d87f5a3272cbeec45835c6ac1cc9b198f8b7d4e3037173273eb6072f6991a06072a3956e2083ad1f8725ee5033b6cc6547e3159
- SSDEEP 49152:WMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fz:vd9AddBcryO3cICgI9z
- TLSH T1DEF57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10