General

  • Target
    2026-08-08_b2f1ab9cb706b7b2c073bd9e8cd1c56a_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
  • Size 3.3MB
  • Sample260808-nnd3aawbmc
  • SHA256 8780b1bd90755a45e67ddfd1a7705c43461e51a1fbbf3bfd6a13020bb547e732
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • meshagent

Version
  • 2

Botnet
  • TacticalRMM

C2
  • http://mesh.anzacg.com:443/agent.ashx

Attributes
  • mesh_id

    0x388E1B73D0C62D6CE5D43CCD7192A8F0C7F342E5904D9B5B9C366978388F22DD524955D44E1121D5F3ADCECDAF20776F

  • server_id

    BF9CE36AC2928B360CFC1C4629F357E546D80842BE9FAB332B47D3B48880B086919BBAA271BDD2B674699BAB82C0077C

  • wss

    wss://mesh.anzacg.com:443/agent.ashx

Targets

    • Target
      2026-08-08_b2f1ab9cb706b7b2c073bd9e8cd1c56a_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
    • Size 3.3MB
    • SHA256 8780b1bd90755a45e67ddfd1a7705c43461e51a1fbbf3bfd6a13020bb547e732
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Matrix

Tasks