General

  • Target
    2026-08-23_5467c18ea22ef8f3d83412babc2ff57a_coinminer_glassworm_hijackloader_icedid_njrat_ransomhub_ryuk_sliver
  • Size 3.3MB
  • Sample260824-nvanfasxey
  • SHA256 fb19a64b802fe51a4b990f4c98136bffe7490188610b7c7251c84cb6ef7270fb
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • meshagent

Version
  • 2

Botnet
  • n1

C2
  • http://speed.ableoil.net:443/agent.ashx

Attributes
  • mesh_id

    0x8AA3332460A0404D860C3E46D95525BDAA328F1C24C077E14BD0A95BE2D0EA4BA9384994844057E79C6D335B469A38CD

  • server_id

    BEC956642E30BE68AB6B3ED2F40F4E784CBA349DE3EB7E116F5B22319425FB4FE4C5A6831A5CE5524C569F6F42190B24

  • wss

    wss://speed.ableoil.net:443/agent.ashx

Targets

    • Target
      2026-08-23_5467c18ea22ef8f3d83412babc2ff57a_coinminer_glassworm_hijackloader_icedid_njrat_ransomhub_ryuk_sliver
    • Size 3.3MB
    • SHA256 fb19a64b802fe51a4b990f4c98136bffe7490188610b7c7251c84cb6ef7270fb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects MeshAgent payload

    • Family: MeshAgent

      MeshAgent is an open source remote access trojan written in C++.

MITRE ATT&CK Matrix

Tasks