General

  • Target
    2026-08-13_66ad1b21879095d1ddeddad417a276ca_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
  • Size 3.3MB
  • Sample260813-p8w92azfrd
  • SHA256 b0fa906e6355a27545c5de7b067494fb549da5fed54a2b90c809c2c943d1074f
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • meshagent

Version
  • 2

Botnet
  • apolo

Attributes
  • mesh_id

    0xA868A66E61DC5BB53AC4B6CB0AE0E044810732A77438D5583C6A00D44F170105F7DD0D7C1BEFCC92726A89867EDCC3F3

  • server_id

    C5C1CC36939020C0B3A76546A69CC9BD29A0E377B3E84B40DC8FD366BC43C400EE3605B1C8A66D391B71269A3A246204

  • wss

    localhost

Targets

    • Target
      2026-08-13_66ad1b21879095d1ddeddad417a276ca_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
    • Size 3.3MB
    • SHA256 b0fa906e6355a27545c5de7b067494fb549da5fed54a2b90c809c2c943d1074f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Matrix

Tasks