General
- Target 2026-09-09_ca0be78ff3bc769cad7f5a3a5e1f4d61_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
- Size 3.3MB
- Sample260910-3f7f7azsa1
- SHA256 8977d869a66f806c60ca81a6a1c4fe3943284ae75760ab9082070da781abbe94
- MD5 ca0be78ff3bc769cad7f5a3a5e1f4d61
- SHA1 4b7f1d702f604d27aca909ff3a15a173657533d2
- SHA512 4aa86fe342c32d1b895d6aa75906324c770ccb70cfc8974743437c0959e184add60f647dca8414d68615c758f59acf448d3db72039973795a786c7f3164e145a
- SSDEEP 49152:edZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxw5bR:OHvfGfZvZj1/N/z/owJR
- TLSH T189F58DD2A3A600E8E9B7F23C85568517E7F1B81753709BCF16A44A761F236D12B3E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-09_ca0be78ff3bc769cad7f5a3a5e1f4d61_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-09_ca0be78ff3bc769cad7f5a3a5e1f4d61_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
KSupportSH
C2
-
http://hbsoft.cafe24.com:443/agent.ashx
Attributes
-
mesh_id
0x8B27129FF99732B0BA03B46D790D73181D92B4E9DE55A4D75693B993F56AAE582E2E0ABD05138C70FE50FF5D67FBACA2
-
server_id
8EB377F2483D5F95AE2DC6895EDCBF192168440C71680196BCAA72C74C9B9B26E584C6AF1DCC997F4BA0951F8C373CBB
-
wss
wss://hbsoft.cafe24.com:443/agent.ashx
Targets
-
- Target 2026-09-09_ca0be78ff3bc769cad7f5a3a5e1f4d61_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
- Size 3.3MB
- SHA256 8977d869a66f806c60ca81a6a1c4fe3943284ae75760ab9082070da781abbe94
- MD5 ca0be78ff3bc769cad7f5a3a5e1f4d61
- SHA1 4b7f1d702f604d27aca909ff3a15a173657533d2
- SHA512 4aa86fe342c32d1b895d6aa75906324c770ccb70cfc8974743437c0959e184add60f647dca8414d68615c758f59acf448d3db72039973795a786c7f3164e145a
- SSDEEP 49152:edZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxw5bR:OHvfGfZvZj1/N/z/owJR
- TLSH T189F58DD2A3A600E8E9B7F23C85568517E7F1B81753709BCF16A44A761F236D12B3E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10