General
- Target 2026-09-30_01923140a5cabae63b054fa8e37e9cf6_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
- Size 3.3MB
- Sample261001-ydpfda1zhv
- SHA256 36892b2cf41e32be5a9a4846c3a9026c7c5644d8b827e50863b58f8a61738992
- MD5 01923140a5cabae63b054fa8e37e9cf6
- SHA1 a570ded089e64ce35d8ff4eda8dd1e611562dbf4
- SHA512 7a935930fc3093af44ba15172f03f7f4e81e705bbece64ef48bed5c809946d1345ffc65c68e6e94f8415fe7fe0556fc7c164aadb092371104c48cbebb68bd77b
- SSDEEP 49152:wX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Q/:wlRsZ47/QXoHUOfAoj1x6/
- TLSH T1FBF57CD2A7A600E8E977F23C89568517E7F1B81353709BCF15A44A660F236E12B3F712
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-30_01923140a5cabae63b054fa8e37e9cf6_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_01923140a5cabae63b054fa8e37e9cf6_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
TacticalRMM
C2
-
http://mesh.brsuporte.com:443/agent.ashx
Attributes
-
mesh_id
0xAAC68F0294BE0F6B203D1319F7B56453BD4700FF1A2FF64C3A5B835E8FE4C36B046417A1AC810494E1A9454AD4A933E4
-
server_id
CA240B9C4FC0050F5DD4DF77E6950841CB65FF06A760F4912AA139299C83F60CE639E6A8FD0FDAC3583264EE16AB5D83
-
wss
wss://mesh.brsuporte.com:443/agent.ashx
Targets
-
- Target 2026-09-30_01923140a5cabae63b054fa8e37e9cf6_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
- Size 3.3MB
- SHA256 36892b2cf41e32be5a9a4846c3a9026c7c5644d8b827e50863b58f8a61738992
- MD5 01923140a5cabae63b054fa8e37e9cf6
- SHA1 a570ded089e64ce35d8ff4eda8dd1e611562dbf4
- SHA512 7a935930fc3093af44ba15172f03f7f4e81e705bbece64ef48bed5c809946d1345ffc65c68e6e94f8415fe7fe0556fc7c164aadb092371104c48cbebb68bd77b
- SSDEEP 49152:wX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Q/:wlRsZ47/QXoHUOfAoj1x6/
- TLSH T1FBF57CD2A7A600E8E977F23C89568517E7F1B81353709BCF15A44A660F236E12B3F712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10