General
- Target 2026-09-06_4f854f7b7409defc87ef109626f33d94_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
- Size 3.3MB
- Sample260907-d47z7aee64
- SHA256 c8ced867881b5547135564caa0c2da3d05ebb27db989f08ddb7ebfc289ff60dc
- MD5 4f854f7b7409defc87ef109626f33d94
- SHA1 e139a65dd3df54b8b87f5aaadc99a3288fc7b2cf
- SHA512 4f651a0580f1a350d8d2519aed7f367819e4b5317e26f65fe7c8e4ebbc4326b1a3e4d5a6ebfd794ed67f6add121e1ff5a57d8d33a599c9f958af2845fff0d4e1
- SSDEEP 49152:tMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fn:Gd9AddBcryO3cICgI9n
- TLSH T1CEF57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-06_4f854f7b7409defc87ef109626f33d94_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-06_4f854f7b7409defc87ef109626f33d94_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
PENN
Attributes
-
mesh_id
0x71BF79003A216956AD90022FAA58E0BEA5B86639CB1C5D57AB525D293BDD9CB887DE47C74EF48C93EA277A99DA62D536
-
server_id
06CA63D3E432AE8DA2B111B96BA4AEA72B25AE0209BC0F4BEEFA0CD6D829A0EA285269455D5139FD09BA0BFCCF945D33
-
wss
localhost
Targets
-
- Target 2026-09-06_4f854f7b7409defc87ef109626f33d94_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
- Size 3.3MB
- SHA256 c8ced867881b5547135564caa0c2da3d05ebb27db989f08ddb7ebfc289ff60dc
- MD5 4f854f7b7409defc87ef109626f33d94
- SHA1 e139a65dd3df54b8b87f5aaadc99a3288fc7b2cf
- SHA512 4f651a0580f1a350d8d2519aed7f367819e4b5317e26f65fe7c8e4ebbc4326b1a3e4d5a6ebfd794ed67f6add121e1ff5a57d8d33a599c9f958af2845fff0d4e1
- SSDEEP 49152:tMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fn:Gd9AddBcryO3cICgI9n
- TLSH T1CEF57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10