General

  • Target
    2026-07-30_15c192f5e5abc7a1c721cd20d5cd18f5_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
  • Size 3.3MB
  • Sample260730-ns5qsswgqa
  • SHA256 4557ef870f4a4ecdd08a2a610bb66cc2687f3539b8be0907e8147240e5c4bf60
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • meshagent

Version
  • 2

Botnet
  • kmt

C2
  • http://27.102.66.162:443/agent.ashx

Attributes
  • mesh_id

    0x9EAF2747049C0E958FB56F9949CC275045FD476FDD196AC1074651B50E97D84D9771782125030A7519BE37975D69E260

  • server_id

    F6D9DB23C4EC7E2075858F494111B49FDE0D285A144929BAE9C05583A6A0845751A11C465590D4B75B6D1BB6D32575CD

  • wss

    wss://27.102.66.162:443/agent.ashx

Targets

    • Target
      2026-07-30_15c192f5e5abc7a1c721cd20d5cd18f5_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
    • Size 3.3MB
    • SHA256 4557ef870f4a4ecdd08a2a610bb66cc2687f3539b8be0907e8147240e5c4bf60
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Matrix

Tasks