Overview

overview

10

Static

static

10

2026-07-31...er.exe

windows10-2004-x64

1

2026-07-31...er.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-07-31_1d88872b4c37ca5ef9a6fb595b61bbba_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
  • Size 3.3MB
  • Sample260731-ph1jrsseph
  • SHA256 add459c54175a8a4d8a3cb0bf757494d43704b5e2ab7c68c6233309e84dbf1b4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
meshagentlocalbackdoorrattrojan

Malware Config

Extracted

Family

  • meshagent

Version

  • 2

Botnet

  • Local

C2

  • http://10.10.10.201:443/agent.ashx

Attributes
  • mesh_id

    0x1B46BE49443F37370109086E4EC80F7C5F6490CB035326B28B4732C93BBDAE27EAFCD73E70B708552A09703547A4C1EA

  • server_id

    1771FCE77AE13919F2A4382B217152FB63E7746EDD7A58A288253605AA2BF27AD161F689AA5716BAC7AC8A13451E2972

  • wss

    wss://10.10.10.201:443/agent.ashx

Targets

    • Target
      2026-07-31_1d88872b4c37ca5ef9a6fb595b61bbba_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
    • Size 3.3MB
    • SHA256 add459c54175a8a4d8a3cb0bf757494d43704b5e2ab7c68c6233309e84dbf1b4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks