General
- Target 2026-08-13_603fdbeef03d47fabc3d8040ab48a988_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
- Size 3.3MB
- Sample260813-2m9z8azemb
- SHA256 f7f7e8153a70d859d7c56227fdb81fccea925e91cf003a1360d7832f253f818f
- MD5 603fdbeef03d47fabc3d8040ab48a988
- SHA1 f2397a2540ad8604d2e1c25602e7e8b6c357cb47
- SHA512 85c8f4e4eb6536d9df9f5026e79cd0c7537795e9785f2f27409351f6aef7f5c1bd0a43545ed5639a679bb3caa94719f4e16e3dc30026f8a9742eb2c1b36397a8
- SSDEEP 49152:TMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fH:gd9AddBcryO3cICgI9H
- TLSH T127F57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-13_603fdbeef03d47fabc3d8040ab48a988_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_603fdbeef03d47fabc3d8040ab48a988_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Resource
win11ltsc2024-20260710-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
test
Attributes
-
mesh_id
0x026FAF8BD03252FE68A7C469AE7C534F3C2147C284ABF6344D6C953EAECF2509CB1C451703065E644CB33531DD402872
-
server_id
EA70BF03FB7552FED5200B4765CA857E74BA209B4D2DE550C3D6AE0AD86702EEE5ABD1DA2B95EA6C2F468A075BDEC694
-
wss
localhost
Targets
-
- Target 2026-08-13_603fdbeef03d47fabc3d8040ab48a988_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
- Size 3.3MB
- SHA256 f7f7e8153a70d859d7c56227fdb81fccea925e91cf003a1360d7832f253f818f
- MD5 603fdbeef03d47fabc3d8040ab48a988
- SHA1 f2397a2540ad8604d2e1c25602e7e8b6c357cb47
- SHA512 85c8f4e4eb6536d9df9f5026e79cd0c7537795e9785f2f27409351f6aef7f5c1bd0a43545ed5639a679bb3caa94719f4e16e3dc30026f8a9742eb2c1b36397a8
- SSDEEP 49152:TMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fH:gd9AddBcryO3cICgI9H
- TLSH T127F57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10