General

  • Target
    2026-08-22_bc4985cf4f55f05b862cd978c3f44e9d_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
  • Size 3.3MB
  • Sample260823-bwl2msdl7t
  • SHA256 5b877263e77475eb73294bbcd818b22b1a6ea110f8f7f0249c1dc9fa9a5b8c7b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • meshagent

Version
  • 2

Botnet
  • SUNPPgroup

C2
  • http://srv-meshcent.sunpp.local:8080/agent.ashx

Attributes
  • mesh_id

    0x8E59E7A9038B5DCCDE4D3A8C92A8F9D3DBED7AD6A39FC880874CE95826B0DCEC8CFE8E56FE43F12FE4EDE392AC616136

  • server_id

    698BF2FFCB3367021E1A674BF2ACF8DE5CD33830B74557C99CFB98F6D105DE5DE37FFC9AC1B8471A0525D80A698B5638

  • wss

    wss://srv-meshcent.sunpp.local:8080/agent.ashx

Targets

    • Target
      2026-08-22_bc4985cf4f55f05b862cd978c3f44e9d_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
    • Size 3.3MB
    • SHA256 5b877263e77475eb73294bbcd818b22b1a6ea110f8f7f0249c1dc9fa9a5b8c7b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Matrix

Tasks