Overview

overview

10

Static

static

10

2026-08-07...er.exe

windows10-2004-x64

10

2026-08-07...er.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-08-07_333da14fbe34148a221b3af3c88d7ed4_coinminer_elex_glassworm_icedid_njrat_ransomhub_revil_sliver
  • Size 3.7MB
  • Sample260807-n2k3ravbnc
  • SHA256 c3464639c9a30babc64e599a965bbe90d02aa0bf4f9e6e572ebd896ff370a471
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
meshagentclientsbackdoorrattrojan

Malware Config

Extracted

Family

  • meshagent

Version

  • 2

Botnet

  • Clients

C2

  • http://ausecours.arbisa.fr:443/agent.ashx

Attributes
  • mesh_id

    0xB2662B26CB398F9D599F7FAD840BAEE64DB60ED94BC2F2E60C7463D8337BD785F5565965E49131403F08BA8A5110F2CD

  • server_id

    D8476224E18725348146BCA748491F36E448E464FF0A0EA82158C5A3BF89C1E5D1256DFAE42DF2F3765A8C5884717ED9

  • wss

    wss://ausecours.arbisa.fr:443/agent.ashx

Targets

    • Target
      2026-08-07_333da14fbe34148a221b3af3c88d7ed4_coinminer_elex_glassworm_icedid_njrat_ransomhub_revil_sliver
    • Size 3.7MB
    • SHA256 c3464639c9a30babc64e599a965bbe90d02aa0bf4f9e6e572ebd896ff370a471
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    backdoorclientsmeshagentrattrojan

    • Detects MeshAgent payload

    • Family: MeshAgent

      MeshAgent is an open source remote access trojan written in C++.

      rattrojanbackdoormeshagent
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks