General

  • Target
    2026-07-09_742674a62aa8a18e4e6430c066c1a025_coinminer_glassworm_icedid_njrat_ryuk_sliver
  • Size 3.3MB
  • Sample260709-mm3tkshx6t
  • SHA256 c9467ce30abf96c3ed31dca5dfc7ba05ce4cf01fc06aa801945a0ceb0660f894
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • meshagent

Version
  • 2

Botnet
  • TacticalRMM

C2
  • http://mesh.davidthegeek.com:443/agent.ashx

Attributes
  • mesh_id

    0x7D20C1A25BA1354AFA9EBA35F669B1764360DBC0EDA6105EB898E0D4FD4F1E26A23B5ECCED3823CFAB82D72CAA428A85

  • server_id

    E45CF4FCAC5363AF6B93A65E96C42809A8DB564A10C843DFAA92A2B5B8C40CE9EA4C4F7749A78D617E534D2E97CF93C8

  • wss

    wss://mesh.davidthegeek.com:443/agent.ashx

Targets

    • Target
      2026-07-09_742674a62aa8a18e4e6430c066c1a025_coinminer_glassworm_icedid_njrat_ryuk_sliver
    • Size 3.3MB
    • SHA256 c9467ce30abf96c3ed31dca5dfc7ba05ce4cf01fc06aa801945a0ceb0660f894
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Matrix

Tasks