General

  • Target
    2026-08-07_bad4e52779737c2a320415e436323c0d_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
  • Size 3.3MB
  • Sample260807-lw6fdsvxhv
  • SHA256 3f5b30f372864d89b1fbe34b094c7b32634da780699f9134e47b06cce97afc6a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • meshagent

Version
  • 2

Botnet
  • update

C2
  • http://139.59.116.161:443/agent.ashx

Attributes
  • mesh_id

    0xAA5090EF8EAF0C5E65F013D16C7EDD9A1BBA0D7A36E3EA3E499D10B339703A3AEB60F332B8F35A10C4A3745C6D90BDEA

  • server_id

    CE7EB46A0EDC1C945DD4D06BEDD99D53B0F8EA8C6421B39D55440015C96B5F183154014251752599DFF656EE309DBC96

  • wss

    wss://139.59.116.161:443/agent.ashx

Targets

    • Target
      2026-08-07_bad4e52779737c2a320415e436323c0d_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
    • Size 3.3MB
    • SHA256 3f5b30f372864d89b1fbe34b094c7b32634da780699f9134e47b06cce97afc6a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Matrix

Tasks