General

  • Target
    2026-07-22_48c935820975dd00b62717de96d9012b_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc
  • Size 5.5MB
  • Sample260722-ye478atclf
  • SHA256 58081c42d9fafb3d3afb9d73937a4f3bdaaff2fb0b699234eb84dc52db771e2e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • meshagent

Version
  • 2

Botnet
  • Testing Purpose Only

C2
  • http://bullsseo.com:443/agent.ashx

Attributes
  • mesh_id

    0x4B20F67211C20CD07E5E53285D1203059159DFF0AC668E10C1DB29007651D5C3BCD6FB31D9DA6E7C120C9F21DAC980BF

  • server_id

    460435B76E2BA7A386C796547EE9B205E12F241B5E68453D37FB6DC55D7215361C5860C69962327ED15D48ACFF0C8280

  • wss

    wss://bullsseo.com:443/agent.ashx

Targets

    • Target
      2026-07-22_48c935820975dd00b62717de96d9012b_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc
    • Size 5.5MB
    • SHA256 58081c42d9fafb3d3afb9d73937a4f3bdaaff2fb0b699234eb84dc52db771e2e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Matrix

Tasks