Overview

overview

10

Static

static

10

2026-07-31...er.exe

windows10-2004-x64

1

2026-07-31...er.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-07-31_14db761717da0b661e4a0e8e79373e66_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
  • Size 3.3MB
  • Sample260731-e2cxpscf33
  • SHA256 6a6e5c81e170f8a0677ecf2b8ea399522e0b0df9e2b4bef9b13d3fd7b7bb79e5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
meshagenttacticalrmmbackdoorrattrojan

Malware Config

Extracted

Family

  • meshagent

Version

  • 2

Botnet

  • TacticalRMM

C2

  • http://mesh.msp.bluecloud.net.nz:443/agent.ashx

Attributes
  • mesh_id

    0x875DE9D4DC349EA81F05823A90E8D4439FADFA8C9191594EB376FC1671B05B55F837EA97F5D8B0D36D2D6B05E10BC548

  • server_id

    72AE4790AD3CDD4AB424F0E96B67E181FA10F7CBEFF7622B51A2CC29DA0D17B9333C61D85A1DD73867FF769677BFF378

  • wss

    wss://mesh.msp.bluecloud.net.nz:443/agent.ashx

Targets

    • Target
      2026-07-31_14db761717da0b661e4a0e8e79373e66_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
    • Size 3.3MB
    • SHA256 6a6e5c81e170f8a0677ecf2b8ea399522e0b0df9e2b4bef9b13d3fd7b7bb79e5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks