General

  • Target
    2026-08-09_18924d5b5aaa3da0923c2bed194f5c23_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
  • Size 3.3MB
  • Sample260809-xfbfvsxsat
  • SHA256 17be9aff38cd304caedc8134b808da3067d4c2c64d019fff2b9b9f414e3a4e91
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • meshagent

Version
  • 2

Botnet
  • UP Ethernet

C2
  • http://support-grupopirasa.fortiddns.com:443/agent.ashx

Attributes
  • mesh_id

    0x8BCD27002DF67CE3F15D6CC958F7BEBA6E9C0EBC2B204A6181E680394D8B6B3A552FA5023958EC7DD4DA52A29422A142

  • server_id

    55D494C03C02B83C3A9754D9FF6F6E0B65D6F3E6BC693122C2D2764C394A68D6AD3C1DC6D2B09EFA4A6BF548B26B88E0

  • wss

    wss://support-grupopirasa.fortiddns.com:443/agent.ashx

Targets

    • Target
      2026-08-09_18924d5b5aaa3da0923c2bed194f5c23_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
    • Size 3.3MB
    • SHA256 17be9aff38cd304caedc8134b808da3067d4c2c64d019fff2b9b9f414e3a4e91
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Matrix

Tasks