General
- Target 2026-11-01_f283e09940ea3987c038f9cff9a75036_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
- Size 3.3MB
- Sample261102-dwhekazxcs
- SHA256 5cc7955e86b3a808281a36575544e43442c9001bc9d7a9013d9ec84c1e18217c
- MD5 f283e09940ea3987c038f9cff9a75036
- SHA1 fa12c27defa3b26a4674d6ede815c10bb7d08bf7
- SHA512 5eedc4ac39f0cec8b581734e0b553218fa95c702c1a81d15b9e77ac3fa45fd808db4b01882b56d0e8cda5933003c57e771d5cfaf9c4ffd8e09aa60931fae6fe2
- SSDEEP 49152:tMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fL:Gd9AddBcryO3cICgI9L
- TLSH T168F57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-01_f283e09940ea3987c038f9cff9a75036_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_f283e09940ea3987c038f9cff9a75036_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
Edelstoff Media
C2
-
http://mesh.edelstoff-media.de:443/agent.ashx
Attributes
-
mesh_id
0x911687DD21A8C9AA5072ABE4365B48279B092502F79D850C45E9344518F286A54DBA59DDB2B48DFA174647959302DF17
-
server_id
2CB41567F4ED50AAAF670A04FB47E1B6A3498D4725ADE5EFD3BB4E2EE083000EA948C20A7C3943C829562C01B86D1E27
-
wss
wss://mesh.edelstoff-media.de:443/agent.ashx
Targets
-
- Target 2026-11-01_f283e09940ea3987c038f9cff9a75036_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
- Size 3.3MB
- SHA256 5cc7955e86b3a808281a36575544e43442c9001bc9d7a9013d9ec84c1e18217c
- MD5 f283e09940ea3987c038f9cff9a75036
- SHA1 fa12c27defa3b26a4674d6ede815c10bb7d08bf7
- SHA512 5eedc4ac39f0cec8b581734e0b553218fa95c702c1a81d15b9e77ac3fa45fd808db4b01882b56d0e8cda5933003c57e771d5cfaf9c4ffd8e09aa60931fae6fe2
- SSDEEP 49152:tMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fL:Gd9AddBcryO3cICgI9L
- TLSH T168F57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10