General
- Target 2026-08-16_cedc34661122067ca7b7294e4593740e_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
- Size 3.3MB
- Sample260816-g7sapabf69
- SHA256 fa19ad5fc27f18f4c11f363feda6ff947a2629693987effb58d57098432f663f
- MD5 cedc34661122067ca7b7294e4593740e
- SHA1 405add7187b07585e42c43e2f5835622702a41f9
- SHA512 31b80070fc34f4a2d89280ccd9407b71e6970934132f7efffc4ef09af9c7d45c8275781c1985c7898189d111eef32c1a3ddeb68fe6d1d3a67f69024071a530c0
- SSDEEP 49152:GdZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxw5b7:GHvfGfZvZj1/N/z/owJ7
- TLSH T178F58DD2A3A600E8E9B7F23C85568517E7F1B81753709BCF16A44A761F236D12B3E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-16_cedc34661122067ca7b7294e4593740e_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_cedc34661122067ca7b7294e4593740e_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
MLCOM Condor
C2
-
http://meshcentral.ibke.de:443/agent.ashx
Attributes
-
mesh_id
0x3B2907E17047654A2E5FA2A41AD23FCD93141F47A6B796E268DF41B6376F39A568F8F3A1EBBEA9B5E6E282271700E2B2
-
server_id
27DEEB39E01DD3DDE477880F14546322C298AB882F5D4A085AAEAFD2C29168A561D9FDC52BED2E5EA4BA0A91982C4BCE
-
wss
wss://meshcentral.ibke.de:443/agent.ashx
Targets
-
- Target 2026-08-16_cedc34661122067ca7b7294e4593740e_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
- Size 3.3MB
- SHA256 fa19ad5fc27f18f4c11f363feda6ff947a2629693987effb58d57098432f663f
- MD5 cedc34661122067ca7b7294e4593740e
- SHA1 405add7187b07585e42c43e2f5835622702a41f9
- SHA512 31b80070fc34f4a2d89280ccd9407b71e6970934132f7efffc4ef09af9c7d45c8275781c1985c7898189d111eef32c1a3ddeb68fe6d1d3a67f69024071a530c0
- SSDEEP 49152:GdZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxw5b7:GHvfGfZvZj1/N/z/owJ7
- TLSH T178F58DD2A3A600E8E9B7F23C85568517E7F1B81753709BCF16A44A761F236D12B3E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10