General
- Target 2026-08-13_66ad1b21879095d1ddeddad417a276ca_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
- Size 3.3MB
- Sample260813-p8w92azfrd
- SHA256 b0fa906e6355a27545c5de7b067494fb549da5fed54a2b90c809c2c943d1074f
- MD5 66ad1b21879095d1ddeddad417a276ca
- SHA1 ba6f0d37965d2b3f8f52f683a2cdbb6ed663ec58
- SHA512 a49a0ccbc7635ed182a87e4d0b01528e13361346eb332686ae0c2973c638e58fa0cac0b5d5088055a2f9d41c750712abfac332d869c51d5dd263473f7ca320db
- SSDEEP 49152:FMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fNA:Od9AddBcryO3cICgI9e
- TLSH T123F57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-13_66ad1b21879095d1ddeddad417a276ca_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_66ad1b21879095d1ddeddad417a276ca_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
apolo
Attributes
-
mesh_id
0xA868A66E61DC5BB53AC4B6CB0AE0E044810732A77438D5583C6A00D44F170105F7DD0D7C1BEFCC92726A89867EDCC3F3
-
server_id
C5C1CC36939020C0B3A76546A69CC9BD29A0E377B3E84B40DC8FD366BC43C400EE3605B1C8A66D391B71269A3A246204
-
wss
localhost
Targets
-
- Target 2026-08-13_66ad1b21879095d1ddeddad417a276ca_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
- Size 3.3MB
- SHA256 b0fa906e6355a27545c5de7b067494fb549da5fed54a2b90c809c2c943d1074f
- MD5 66ad1b21879095d1ddeddad417a276ca
- SHA1 ba6f0d37965d2b3f8f52f683a2cdbb6ed663ec58
- SHA512 a49a0ccbc7635ed182a87e4d0b01528e13361346eb332686ae0c2973c638e58fa0cac0b5d5088055a2f9d41c750712abfac332d869c51d5dd263473f7ca320db
- SSDEEP 49152:FMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fNA:Od9AddBcryO3cICgI9e
- TLSH T123F57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10