Overview

overview

10

Static

static

10

2026-09-04...er.exe

windows10-2004-x64

1

2026-09-04...er.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-09-04_181d32601c830d748d8c723a548da0c2_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
  • Size 3.3MB
  • Sample260905-v365yafp2v
  • SHA256 4dda975a08384c9bcde2169ad4e9483d9b4a536512d7198bf6b4f94846aa96ad
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
meshagentmars | flowbackdoorrattrojan

Malware Config

Extracted

Family

  • meshagent

Version

  • 2

Botnet

  • MARS | FLOW

C2

  • http://mesh.zoorroo.icu:443/agent.ashx

Attributes
  • mesh_id

    0x610CDDC53EADDC60316A2B8F35CB93F1646F2F92E70E92D72BD7503BE7A7D3CB8A65DF5205315ADF88E4A73761E2C891

  • server_id

    D5E5A0BBF0C8F459722B46ADA23381CB1895D7541DCA57B0B08C0A3E72A4413F18FB53896BE77CB084EFD4D2615680F5

  • wss

    wss://mesh.zoorroo.icu:443/agent.ashx

Targets

    • Target
      2026-09-04_181d32601c830d748d8c723a548da0c2_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
    • Size 3.3MB
    • SHA256 4dda975a08384c9bcde2169ad4e9483d9b4a536512d7198bf6b4f94846aa96ad
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks