General

  • Target
    2026-08-09_51f97258c5fcc44d3229acf388d3dcb1_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
  • Size 3.3MB
  • Sample260809-bq8y8axgrh
  • SHA256 60b66d8a4f83d16184e92671f14945d39f3029ef008819e0daafd096c05798ca
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • meshagent

Version
  • 2

Botnet
  • Staff

C2
  • http://mesh.estesfinancial.internal:8080/agent.ashx

Attributes
  • mesh_id

    0xF260AA8510D12D73D9D502D6C4BAB39899325B282013BAA03FE9F9E7EF54DAA07CAD827AF3DE18A51D9E4544057793C8

  • server_id

    3EF315F72B13FF09B89ADBA7B4E6B2DE164B0C04BB216FBCD4981A70CB16DD06C2D32173612488C66F9ABD7B274E4E71

  • wss

    wss://mesh.estesfinancial.internal:8080/agent.ashx

Targets

    • Target
      2026-08-09_51f97258c5fcc44d3229acf388d3dcb1_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
    • Size 3.3MB
    • SHA256 60b66d8a4f83d16184e92671f14945d39f3029ef008819e0daafd096c05798ca
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Matrix

Tasks