General
- Target 2026-09-23_d86709ad77885e7d91fe0e3508f05058_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
- Size 3.3MB
- Sample260924-bb3tnaad33
- SHA256 64ff4a03f98999d3f99bc074851cdcee02dfd88045beafee96b3e524f533f82b
- MD5 d86709ad77885e7d91fe0e3508f05058
- SHA1 514ced4c67cf57f32ee9986fb2e2284447d70b67
- SHA512 8095981764f39b824478f1c7640be4864048bd2011d2e35a4d62a717ca02cbc16f6b9c0749c3914ca1c54dd0b1d728a4ad6f763f67d327ecc999e4552ce21dce
- SSDEEP 49152:tdZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxw5b9:PHvfGfZvZj1/N/z/owJ9
- TLSH T139F58DD2A3A600E8E9B7F23C85568517E7F1B81753709BCF16A44A761F236D12B3E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-23_d86709ad77885e7d91fe0e3508f05058_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-23_d86709ad77885e7d91fe0e3508f05058_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
Суворовский
C2
-
http://panel100.duckdns.org:4040/agent.ashx
Attributes
-
mesh_id
0x011F54EC00D713CDB4D9B99229CC06BA722A03F4D39DB411D1EFFFFE3C3F3259E33DF405064E916F8E16DD8EDC46E289
-
server_id
AD518773EE45E39DD49A71A604116E32CF1FEEF52B0C611FF13B6E195FBBEA91DBBCC302D0549FED7D22CD5B71F2BA38
-
wss
wss://panel100.duckdns.org:4040/agent.ashx
Targets
-
- Target 2026-09-23_d86709ad77885e7d91fe0e3508f05058_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
- Size 3.3MB
- SHA256 64ff4a03f98999d3f99bc074851cdcee02dfd88045beafee96b3e524f533f82b
- MD5 d86709ad77885e7d91fe0e3508f05058
- SHA1 514ced4c67cf57f32ee9986fb2e2284447d70b67
- SHA512 8095981764f39b824478f1c7640be4864048bd2011d2e35a4d62a717ca02cbc16f6b9c0749c3914ca1c54dd0b1d728a4ad6f763f67d327ecc999e4552ce21dce
- SSDEEP 49152:tdZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxw5b9:PHvfGfZvZj1/N/z/owJ9
- TLSH T139F58DD2A3A600E8E9B7F23C85568517E7F1B81753709BCF16A44A761F236D12B3E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10