General
- Target 2026-10-11_219349b80fcc64a734fac787110a89a7_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
- Size 3.3MB
- Sample261013-daaslaet2v
- SHA256 5b7004e5ce78c92e66704c45d8b109cdf6378b69c0f31373a011d661e32adc0d
- MD5 219349b80fcc64a734fac787110a89a7
- SHA1 308cf1c8e33a44e9ddbe613ef7eea197b1a4f1b9
- SHA512 dd99972300538e5bebc5f84d0048d923d6699a0e79abdbfdea9270fef2d9ef3c160af62370705e18489198a91f0c47e118fe45d5f1741a32cbc641a52a0e4ca2
- SSDEEP 49152:PMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fW:kd9AddBcryO3cICgI9W
- TLSH T18AF57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-11_219349b80fcc64a734fac787110a89a7_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-11_219349b80fcc64a734fac787110a89a7_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
Server
C2
-
http://meshcentral.fleischhauer.com:443/agent.ashx
Attributes
-
mesh_id
0x89E5E56BA5864559E92448DC122B68763FE4B5AD02268996D783C0FA35A71105D326C2912F6959C7AA0E92824A5D0392
-
server_id
219F23D589C6FC67E2360D75EF732CAEDB4868C4FE6ED614905505486CFCBC675E0BA39667100581885CF99311DBA5B2
-
wss
wss://meshcentral.fleischhauer.com:443/agent.ashx
Targets
-
- Target 2026-10-11_219349b80fcc64a734fac787110a89a7_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
- Size 3.3MB
- SHA256 5b7004e5ce78c92e66704c45d8b109cdf6378b69c0f31373a011d661e32adc0d
- MD5 219349b80fcc64a734fac787110a89a7
- SHA1 308cf1c8e33a44e9ddbe613ef7eea197b1a4f1b9
- SHA512 dd99972300538e5bebc5f84d0048d923d6699a0e79abdbfdea9270fef2d9ef3c160af62370705e18489198a91f0c47e118fe45d5f1741a32cbc641a52a0e4ca2
- SSDEEP 49152:PMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fW:kd9AddBcryO3cICgI9W
- TLSH T18AF57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10