Overview

overview

10

Static

static

10

2026-09-29...er.exe

windows10-2004-x64

3

2026-09-29...er.exe

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-09-29_4342e9610aa9c575a0685055ce275104_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
  • Size 3.3MB
  • Sample260930-1gscjsxybv
  • SHA256 14edd423232fbcc9ee1c69bb3bc6cf5432cc453e234c3408a7bf2c39018d8092
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
meshagentdefaultbackdoordiscoveryrattrojan

Malware Config

Extracted

Family

  • meshagent

Version

  • 2

Botnet

  • default

C2

  • http://185.216.68.76:444/agent.ashx

Attributes
  • mesh_id

    0x4D35EF1E986A9B721BE8AC66E7072BC886AB0C151546E51306843EE6899070010974344350B54C9AD727EB7F67DA5F23

  • server_id

    CECB3A6F4BEF89E96125A5C2302C7328BBA54091E983D2EEA7469C0EDFFF380342307D0447229E2B71BDB3CD90964127

  • wss

    wss://185.216.68.76:444/agent.ashx

Targets

    • Target
      2026-09-29_4342e9610aa9c575a0685055ce275104_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
    • Size 3.3MB
    • SHA256 14edd423232fbcc9ee1c69bb3bc6cf5432cc453e234c3408a7bf2c39018d8092
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks