Overview

overview

10

Static

static

10

2026-06-08...er.exe

windows10-2004-x64

1

2026-06-08...er.exe

windows11-21h2-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-06-08_a0bac220be8828f5f9c92e84e6c83075_coinminer_glassworm_icedid_njrat_ryuk_sliver
  • Size 3.3MB
  • Sample260608-vxmt4scw5t
  • SHA256 ac56157d1a50380a58ab8e52a452034ffaaf59f619a293a76419553056a07490
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
meshagenttacticalrmmbackdoorrattrojan

Malware Config

Extracted

Family

  • meshagent

Version

  • 2

Botnet

  • TacticalRMM

C2

  • http://mesh.yoda.ifprumuarama.local:443/agent.ashx

Attributes
  • mesh_id

    0x06786DD742DC2E3077F5E282A0D76FC4B07F6BD7742F706CBE2A4099AAC1E41EED6ACC75110427AA4DC789491092BB58

  • server_id

    91CC6FDC133CF2AFE8578E48F7B6D207D8483E8616BFCE6DA81F691A9624ACC057C5E4D9010A966C6AA401131FC4ADB4

  • wss

    wss://mesh.yoda.ifprumuarama.local:443/agent.ashx

Targets

    • Target
      2026-06-08_a0bac220be8828f5f9c92e84e6c83075_coinminer_glassworm_icedid_njrat_ryuk_sliver
    • Size 3.3MB
    • SHA256 ac56157d1a50380a58ab8e52a452034ffaaf59f619a293a76419553056a07490
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks