Overview

overview

10

Static

static

10

2026-08-23...er.exe

windows10-2004-x64

10

2026-08-23...er.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-08-23_a1d2c051db661862fa14879ce23e06a3_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
  • Size 4.3MB
  • Sample260824-dreswacm5s
  • SHA256 4d31abd667957b889849815ac64fcd3d4d6ba462e59b122e7f0451fb725bf90f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
meshagentn1backdoorrattrojan

Malware Config

Extracted

Family

  • meshagent

Version

  • 2

Botnet

  • n1

C2

  • http://speed.ableoil.net:443/agent.ashx

Attributes
  • mesh_id

    0x8AA3332460A0404D860C3E46D95525BDAA328F1C24C077E14BD0A95BE2D0EA4BA9384994844057E79C6D335B469A38CD

  • server_id

    BEC956642E30BE68AB6B3ED2F40F4E784CBA349DE3EB7E116F5B22319425FB4FE4C5A6831A5CE5524C569F6F42190B24

  • wss

    wss://speed.ableoil.net:443/agent.ashx

Targets

    • Target
      2026-08-23_a1d2c051db661862fa14879ce23e06a3_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
    • Size 4.3MB
    • SHA256 4d31abd667957b889849815ac64fcd3d4d6ba462e59b122e7f0451fb725bf90f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    backdoormeshagentrattrojan

    • Detects MeshAgent payload

    • Family: MeshAgent

      MeshAgent is an open source remote access trojan written in C++.

      rattrojanbackdoormeshagent
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks