General

  • Target
    2026-08-21_56ff40d4d09d65589ad8962fe6cb946c_coinminer_glassworm_icedid_njrat_ransomhub_ryuk
  • Size 3.3MB
  • Sample260822-r68ldsvhpg
  • SHA256 32caebf88e269ef0e174e2d49a5ad7304900353bc27fdccd1272528b7e70ec77
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • meshagent

Version
  • 2

Botnet
  • CD1-WS

C2
  • http://axinmeshlg.central.inditex.grp:443/agent.ashx

Attributes
  • mesh_id

    0xFEB43E45148578418CA3228222BCBC2782550C5CA64A1B6BFA29979DF1396A9D59DD9332E4529E72AB36958D0C70DA83

  • server_id

    57E094C5120DEA8A5D7D756D045F72F14EBFC7C0DA98627F639927327A7ADED1DD536EB893EB4FA2EB4CEFF116D4F606

  • wss

    wss://axinmeshlg.central.inditex.grp:443/agent.ashx

Targets

    • Target
      2026-08-21_56ff40d4d09d65589ad8962fe6cb946c_coinminer_glassworm_icedid_njrat_ransomhub_ryuk
    • Size 3.3MB
    • SHA256 32caebf88e269ef0e174e2d49a5ad7304900353bc27fdccd1272528b7e70ec77
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Matrix

Tasks