Overview

overview

10

Static

static

10

2026-07-31...er.exe

windows10-2004-x64

1

2026-07-31...er.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-07-31_880ea790c17969a7938204947426e446_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
  • Size 3.3MB
  • Sample260731-dcejkaaj2s
  • SHA256 a2d7c477d21045ef0235de220e1c3df1ef206b44640b843ce45413d9c9a31de2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
meshagentdevbackdoorrattrojan

Malware Config

Extracted

Family

  • meshagent

Version

  • 2

Botnet

  • DEV

C2

  • http://mesh-remote.veronicas.app:443/agent.ashx

Attributes
  • mesh_id

    0x2D9AE24AAF19921F2F07FCBB754D8BED849A95CCD55071ED8754AD1F120AA013B1F02A8D18F0A5637E149DE9A74D1399

  • server_id

    59A10D9F9BE6A7179A576E7D85135494B5DD2C7500FB667E38ED2B8D29712EB781BE9BEF3EC617BD3ACE8059E96C14CA

  • wss

    wss://mesh-remote.veronicas.app:443/agent.ashx

Targets

    • Target
      2026-07-31_880ea790c17969a7938204947426e446_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
    • Size 3.3MB
    • SHA256 a2d7c477d21045ef0235de220e1c3df1ef206b44640b843ce45413d9c9a31de2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks