General
- Target 2026-08-23_b335d2ac2e4c045b208f51d0d1633459_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
- Size 3.3MB
- Sample260824-a3tjma1grf
- SHA256 ebfe0a3a3f5f2504cfd94fdf8581c2bc9ca861f1074390f4deb5b5914f8568c1
- MD5 b335d2ac2e4c045b208f51d0d1633459
- SHA1 b335eafedefcac27a4fa8e4c69bc8a60e3139c13
- SHA512 a1de974178b84e4a80a3c4963862d6718c4384ef50d340b66c5843db04425a3b6230c7cd8bc46b2623f36028758b183d8f5c24cab5dd9311922ad2c60342776f
- SSDEEP 49152:4MSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fE:9d9AddBcryO3cICgI9E
- TLSH T16CF57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-23_b335d2ac2e4c045b208f51d0d1633459_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_b335d2ac2e4c045b208f51d0d1633459_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
Test
Attributes
-
mesh_id
0x4EDE024E1B1AC65C15552CDFEAFF67D9445D240BA18785B166AA2719765F358D2E72A16C726C5A9923C56CEF60F88A34
-
server_id
E009F9A01DF64EBE8D186A405EE06BB43C162839237BC6DFA91A0D1DDCA5D905E7D37A0CB9717EAEB6FB7D29988B0CBD
-
wss
localhost
Targets
-
- Target 2026-08-23_b335d2ac2e4c045b208f51d0d1633459_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
- Size 3.3MB
- SHA256 ebfe0a3a3f5f2504cfd94fdf8581c2bc9ca861f1074390f4deb5b5914f8568c1
- MD5 b335d2ac2e4c045b208f51d0d1633459
- SHA1 b335eafedefcac27a4fa8e4c69bc8a60e3139c13
- SHA512 a1de974178b84e4a80a3c4963862d6718c4384ef50d340b66c5843db04425a3b6230c7cd8bc46b2623f36028758b183d8f5c24cab5dd9311922ad2c60342776f
- SSDEEP 49152:4MSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fE:9d9AddBcryO3cICgI9E
- TLSH T16CF57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10