Overview

overview

10

Static

static

10

2026-04-15...er.exe

windows10-2004-x64

1

2026-04-15...er.exe

windows11-21h2-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-04-15_d9dd2ecd89ed1f2c31e02133ea36eb7d_coinminer_glassworm_icedid_njrat_ryuk_sliver
  • Size 3.3MB
  • Sample260415-llgpaaaz5q
  • SHA256 485f3537202db2a06d9af5b1e20e01d390452097a0b24c2835e2b6bd66f51211
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
meshagentwindowsbackdoorrattrojan

Malware Config

Extracted

Family

  • meshagent

Version

  • 2

Botnet

  • Windows

C2

  • http://172.30.30.210:3080/agent.ashx

Attributes
  • mesh_id

    0x01F2858B66CE85629F384735A42A7CE772C05652BD651C3321822148249B21825CCB6BC633159D7C99E68416B8B1AEDD

  • server_id

    40E99B617CDF0D285157C17F71117D1E7598AFDEBC82B6D8A08BE88A706C3B6146337A82A8E70D453BDD9569378401B3

  • wss

    wss://172.30.30.210:3080/agent.ashx

Targets

    • Target
      2026-04-15_d9dd2ecd89ed1f2c31e02133ea36eb7d_coinminer_glassworm_icedid_njrat_ryuk_sliver
    • Size 3.3MB
    • SHA256 485f3537202db2a06d9af5b1e20e01d390452097a0b24c2835e2b6bd66f51211
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks