General

  • Target
    2026-08-20_f04f4206eeb200b0d06d6579a71c1f23_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
  • Size 3.3MB
  • Sample260820-m755favgmb
  • SHA256 99d7c44a21ecaf0bfe7f379ef7232778a3fa271e211a050a517fc03f2151bcd7
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • meshagent

Version
  • 2

Botnet
  • EAC-Office

C2
  • http://172.30.1.85:443/agent.ashx

Attributes
  • mesh_id

    0xFB59403BC1922E5F6345C41B5D7F7F686630224AD1C702ED836B2A4DE42E17503F0855DFFD14BC8244B6E37D35D4B7F7

  • server_id

    0A382E55EB28ACA0DD800E4F3B5AF0567D7F40D8C0C7A57CAC7EBC2159E286E5216E0296401A3121E2CECE30A4C919D8

  • wss

    wss://172.30.1.85:443/agent.ashx

Targets

    • Target
      2026-08-20_f04f4206eeb200b0d06d6579a71c1f23_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
    • Size 3.3MB
    • SHA256 99d7c44a21ecaf0bfe7f379ef7232778a3fa271e211a050a517fc03f2151bcd7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Matrix

Tasks