General
- Target 2026-08-18_2144d0c2c8e6ba34a254a21d3ffab374_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
- Size 3.3MB
- Sample260819-acc4ysbk2s
- SHA256 a49f3e0d9f2d9af60455109522b86de537d7f4d12020a7c597571333e2d49f21
- MD5 2144d0c2c8e6ba34a254a21d3ffab374
- SHA1 1a81d1a768729a807ee6cea07ce52a0bc11e4e52
- SHA512 1d0afb6b70005052f68ead351ecb2d8e94491e31684dcb2c61116323059fccabb6b2333fbf75b5e2dbaac3af120f24c47a840e710ec5ab9d94b7afa52f3c53bf
- SSDEEP 49152:vMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fy:Ed9AddBcryO3cICgI9y
- TLSH T1CDF57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-18_2144d0c2c8e6ba34a254a21d3ffab374_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_2144d0c2c8e6ba34a254a21d3ffab374_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
Home
Attributes
-
mesh_id
0x49369B90E9E820C78EAAB092238EAED5D2061B28A22A922BFC1C9D27C1B1DBFFB0A8F7EA1383BE4520DC9072ED2CFBC2
-
server_id
EB121441BB1F8615FE808F43DDC4459AC3653F3D7336A7744B37294B8B44D30C1F1362CF620A27DFE7E9F801D61C5412
-
wss
localhost
Targets
-
- Target 2026-08-18_2144d0c2c8e6ba34a254a21d3ffab374_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
- Size 3.3MB
- SHA256 a49f3e0d9f2d9af60455109522b86de537d7f4d12020a7c597571333e2d49f21
- MD5 2144d0c2c8e6ba34a254a21d3ffab374
- SHA1 1a81d1a768729a807ee6cea07ce52a0bc11e4e52
- SHA512 1d0afb6b70005052f68ead351ecb2d8e94491e31684dcb2c61116323059fccabb6b2333fbf75b5e2dbaac3af120f24c47a840e710ec5ab9d94b7afa52f3c53bf
- SSDEEP 49152:vMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fy:Ed9AddBcryO3cICgI9y
- TLSH T1CDF57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10