General

  • Target
    2026-08-03_dae50e827b0047bf50baa9d4a6f3d32b_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
  • Size 3.3MB
  • Sample260804-lc438abr8y
  • SHA256 56f8c0490ac0fec2824d21643e39904599193ad9f4e9053bc02619fb891f3d65
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • meshagent

Version
  • 2

Botnet
  • TacticalRMM

C2
  • http://mesh.gustavodev.xyz:443/agent.ashx

Attributes
  • mesh_id

    0x7EAF7A9AA1AFE450BEA83C5E39DC7AD409AA62FEFDD6A5084C3F04F9917A45999F6123DF80029D5399BA190BB9FC8434

  • server_id

    1A17DAD0D5219707D8BF67614FEA6E55BBBC60D4AFF42FE84BE8B0F9D08FB522E1A7698EEB1BA03A1B1DC4AB651BBC2F

  • wss

    wss://mesh.gustavodev.xyz:443/agent.ashx

Targets

    • Target
      2026-08-03_dae50e827b0047bf50baa9d4a6f3d32b_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
    • Size 3.3MB
    • SHA256 56f8c0490ac0fec2824d21643e39904599193ad9f4e9053bc02619fb891f3d65
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Matrix

Tasks