General

  • Target
    2026-08-02_52a34f8aea474be55672e90818191698_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_ransomhub_satacom_stealc
  • Size 5.6MB
  • Sample260802-w875vsel81
  • SHA256 393994870f440e76e76bf895d8686e58051f335aeab25be7b7f6dfeb9d28251e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • meshagent

Version
  • 2

Botnet
  • Vue4exam

C2
  • http://bullsseo.com:443/agent.ashx

Attributes
  • mesh_id

    0x0F3ECD613895027914E3966633942BEFC309979D4F5197D5707EBE487BFC128081A105E934C70F0FDD6B78A50045F097

  • server_id

    460435B76E2BA7A386C796547EE9B205E12F241B5E68453D37FB6DC55D7215361C5860C69962327ED15D48ACFF0C8280

  • wss

    wss://bullsseo.com:443/agent.ashx

Targets

    • Target
      2026-08-02_52a34f8aea474be55672e90818191698_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_ransomhub_satacom_stealc
    • Size 5.6MB
    • SHA256 393994870f440e76e76bf895d8686e58051f335aeab25be7b7f6dfeb9d28251e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Matrix

Tasks