General

  • Target
    2026-09-09_ca0be78ff3bc769cad7f5a3a5e1f4d61_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
  • Size 3.3MB
  • Sample260910-3f7f7azsa1
  • SHA256 8977d869a66f806c60ca81a6a1c4fe3943284ae75760ab9082070da781abbe94
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • meshagent

Version
  • 2

Botnet
  • KSupportSH

C2
  • http://hbsoft.cafe24.com:443/agent.ashx

Attributes
  • mesh_id

    0x8B27129FF99732B0BA03B46D790D73181D92B4E9DE55A4D75693B993F56AAE582E2E0ABD05138C70FE50FF5D67FBACA2

  • server_id

    8EB377F2483D5F95AE2DC6895EDCBF192168440C71680196BCAA72C74C9B9B26E584C6AF1DCC997F4BA0951F8C373CBB

  • wss

    wss://hbsoft.cafe24.com:443/agent.ashx

Targets

    • Target
      2026-09-09_ca0be78ff3bc769cad7f5a3a5e1f4d61_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
    • Size 3.3MB
    • SHA256 8977d869a66f806c60ca81a6a1c4fe3943284ae75760ab9082070da781abbe94
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Matrix

Tasks