2026-07-04_e0253c7bbc5b4e8dbc6ea231f51ea800_coinminer_glassworm_icedid_njrat_sliver

Classification: Malicious

2026-07-04_e0253c7bbc5b4e8dbc6ea231f51ea800_coinminer_glassworm_icedid_njrat_sliver is a malicious file sample (Windows 64-bit executable).

Detection summary

  • 0 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 2 contacted hosts
  • 2 DNS requests

MITRE ATT&CK associations

Malware families: CHOPSTICK (S0023)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Meshagent Triage 2026-07-03 18:04:36 2026-07-04 17:06:10 malicious-activity
X-Agent ThreatFox Abuse.ch 2026-07-04 00:43:45 2026-07-04 01:25:06 S0023 CHOPSTICK
Generic Malware Hybrid-Analysis 2026-07-03 18:45:04 2026-07-03 18:45:04 malicious-activity
MeshAgent MalwareBazaar Abuse.ch 2026-07-03 17:59:32 2026-07-03 17:59:32 malicious-activity

Tags

evasive suspicious meshagent aaa backdoor discovery execution persistence rat spyware stealer trojan osx.xagent

Sample information

Filenames
2026-07-04_e0253c7bbc5b4e8dbc6ea231f51ea800_coinminer_glassworm_icedid_njrat_sliver, file.exe, e061a76a42aead05e3cf7161b65a73fb8e6f074a0a2aba1b3817eae9ef659491.bin, file
File type
PE32+ executable for MS Windows 5.02 (GUI), x86-64 ...
MD5
e0253c7bbc5b4e8dbc6ea231f51ea800
SHA-1
8e94e9a609f18047c3db3df4c16dc19cd126aced
SHA-256
e061a76a42aead05e3cf7161b65a73fb8e6f074a0a2aba1b3817eae9ef659491
First indexed
2026-07-03 17:59:32
Last updated
2026-09-08 10:01:08

Network contacts

149.154.167.99 104.21.83.120

DNS requests

juj.psgiran.news telegram.me