General
- Target 2026-08-09_18924d5b5aaa3da0923c2bed194f5c23_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
- Size 3.3MB
- Sample260809-xfbfvsxsat
- SHA256 17be9aff38cd304caedc8134b808da3067d4c2c64d019fff2b9b9f414e3a4e91
- MD5 18924d5b5aaa3da0923c2bed194f5c23
- SHA1 fc5a9091badc6073fb20f8db1306b58f8ed5408f
- SHA512 533c3a923ea635f17e1faf05cc4b77fb916b3c47e7a7eef5d5cfad57c4b08afdbd8a258ba2afb82e0dc83e07ad27eed277acd6fafe0d76a71e0f8174cc5ae322
- SSDEEP 49152:UMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fR:Bd9AddBcryO3cICgI9R
- TLSH T164F57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-09_18924d5b5aaa3da0923c2bed194f5c23_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_18924d5b5aaa3da0923c2bed194f5c23_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
UP Ethernet
C2
-
http://support-grupopirasa.fortiddns.com:443/agent.ashx
Attributes
-
mesh_id
0x8BCD27002DF67CE3F15D6CC958F7BEBA6E9C0EBC2B204A6181E680394D8B6B3A552FA5023958EC7DD4DA52A29422A142
-
server_id
55D494C03C02B83C3A9754D9FF6F6E0B65D6F3E6BC693122C2D2764C394A68D6AD3C1DC6D2B09EFA4A6BF548B26B88E0
-
wss
wss://support-grupopirasa.fortiddns.com:443/agent.ashx
Targets
-
- Target 2026-08-09_18924d5b5aaa3da0923c2bed194f5c23_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
- Size 3.3MB
- SHA256 17be9aff38cd304caedc8134b808da3067d4c2c64d019fff2b9b9f414e3a4e91
- MD5 18924d5b5aaa3da0923c2bed194f5c23
- SHA1 fc5a9091badc6073fb20f8db1306b58f8ed5408f
- SHA512 533c3a923ea635f17e1faf05cc4b77fb916b3c47e7a7eef5d5cfad57c4b08afdbd8a258ba2afb82e0dc83e07ad27eed277acd6fafe0d76a71e0f8174cc5ae322
- SSDEEP 49152:UMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fR:Bd9AddBcryO3cICgI9R
- TLSH T164F57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10