General
- Target 2026-08-20_f04f4206eeb200b0d06d6579a71c1f23_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
- Size 3.3MB
- Sample260820-m755favgmb
- SHA256 99d7c44a21ecaf0bfe7f379ef7232778a3fa271e211a050a517fc03f2151bcd7
- MD5 f04f4206eeb200b0d06d6579a71c1f23
- SHA1 2c437d4a476a17b5f4ed9ce4f54a01e9849cb0e3
- SHA512 816e33ed749d6d95a681dae3d2c3187e5cdb2a7490f5df2192e212c9544ef1cde79c52556f5f89a640355df52f5b9597c369cfc2a20feb78ab0a18ead15c4ee3
- SSDEEP 49152:2MSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5f6:Pd9AddBcryO3cICgI96
- TLSH T1B7F57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-20_f04f4206eeb200b0d06d6579a71c1f23_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_f04f4206eeb200b0d06d6579a71c1f23_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
EAC-Office
C2
-
http://172.30.1.85:443/agent.ashx
Attributes
-
mesh_id
0xFB59403BC1922E5F6345C41B5D7F7F686630224AD1C702ED836B2A4DE42E17503F0855DFFD14BC8244B6E37D35D4B7F7
-
server_id
0A382E55EB28ACA0DD800E4F3B5AF0567D7F40D8C0C7A57CAC7EBC2159E286E5216E0296401A3121E2CECE30A4C919D8
-
wss
wss://172.30.1.85:443/agent.ashx
Targets
-
- Target 2026-08-20_f04f4206eeb200b0d06d6579a71c1f23_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
- Size 3.3MB
- SHA256 99d7c44a21ecaf0bfe7f379ef7232778a3fa271e211a050a517fc03f2151bcd7
- MD5 f04f4206eeb200b0d06d6579a71c1f23
- SHA1 2c437d4a476a17b5f4ed9ce4f54a01e9849cb0e3
- SHA512 816e33ed749d6d95a681dae3d2c3187e5cdb2a7490f5df2192e212c9544ef1cde79c52556f5f89a640355df52f5b9597c369cfc2a20feb78ab0a18ead15c4ee3
- SSDEEP 49152:2MSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5f6:Pd9AddBcryO3cICgI96
- TLSH T1B7F57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10