General

  • Target
    2026-06-27_5ce81719b17b1497288680cf8c80045b_coinminer_glassworm_icedid_njrat_ryuk
  • Size 3.3MB
  • Sample260629-hrvljsfw71
  • SHA256 97f11b55e7ed7d9bac066c78def54704cc651246a98bb4fa36f2d12167d5cf7b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • meshagent

Version
  • 2

Botnet
  • NT

C2
  • http://www.intranetntplc.com:443/agent.ashx

Attributes
  • mesh_id

    0x69295FF21F76E4D6880FF180D4BF46B3DCF38379B45A5C7D9F874230FDD1FCE8269818393302ACA0C08372890D6D395A

  • server_id

    FD7E0B386F6D04C24CF4496014C40FE819888218959BBE6D1459D10EAD7C273AC2D44A33AA0F8845AB46619029DE484B

  • wss

    wss://www.intranetntplc.com:443/agent.ashx

Targets

    • Target
      2026-06-27_5ce81719b17b1497288680cf8c80045b_coinminer_glassworm_icedid_njrat_ryuk
    • Size 3.3MB
    • SHA256 97f11b55e7ed7d9bac066c78def54704cc651246a98bb4fa36f2d12167d5cf7b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Matrix

Tasks