General

  • Target
    2026-08-07_9ef1b7ff5f722dab7421c9a6d042d567_coinminer_glassworm_hijackloader_icedid_njrat_ransomhub_ryuk
  • Size 3.3MB
  • Sample260807-2agsxavclf
  • SHA256 f50ce17c794e6d6dc894399c22c6e88d5e11219237f25f26de47ceb8bb73da47
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • meshagent

Version
  • 2

Botnet
  • apolo

C2
  • http://internal.motadataserviceops.com:8443/agent.ashx

Attributes
  • mesh_id

    0x846961B112B8407BDE6AA531FC6CA6795EDA84E496F11880CC4C156DD34C7B4453FA98B2C669C7D9C3D8D6700381BB00

  • server_id

    A797D3BED398E72214EC5B227EEC04D48C2CAAFFE2D3433403BCFE02057F2EED60898674E5B836B1AD0F3B6075AE8493

  • wss

    wss://internal.motadataserviceops.com:8443/agent.ashx

Targets

    • Target
      2026-08-07_9ef1b7ff5f722dab7421c9a6d042d567_coinminer_glassworm_hijackloader_icedid_njrat_ransomhub_ryuk
    • Size 3.3MB
    • SHA256 f50ce17c794e6d6dc894399c22c6e88d5e11219237f25f26de47ceb8bb73da47
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Matrix

Tasks