General

  • Target
    2026-07-20_dd14cf9b37ca43cdb31c5ae1100b0dff_coinminer_glassworm_icedid_njrat_ryuk_sliver
  • Size 3.3MB
  • Sample260720-m9d4qsas3y
  • SHA256 066759c06cb780ebb78ce618dbadb8173a288545a76afebe32a4687110c9222e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • meshagent

Version
  • 2

Botnet
  • Office

C2
  • http://172.16.36.6:443/agent.ashx

Attributes
  • mesh_id

    0x11F991921FCACBC63CBF519ED1D959E2FEE849D5E639E94E60012A820C6BAC303609D14DA8E3008FDC128B9428105BF7

  • server_id

    FA4AD187E3CB84E674A997FC89A346DB4686FB19C0028767E6AB45144A5B0B03130C1AEAEDE0E541B6457AF4CE742694

  • wss

    wss://172.16.36.6:443/agent.ashx

Targets

    • Target
      2026-07-20_dd14cf9b37ca43cdb31c5ae1100b0dff_coinminer_glassworm_icedid_njrat_ryuk_sliver
    • Size 3.3MB
    • SHA256 066759c06cb780ebb78ce618dbadb8173a288545a76afebe32a4687110c9222e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Matrix

Tasks