General

  • Target
    2026-09-30_836ba85c5ce7b682f030840cdd233081_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
  • Size 3.3MB
  • Sample260930-l1czmsvxcs
  • SHA256 6f4081aa1a6b7e3259769b2be682f4b414cac6c2abff36321ea1e6136ec279f3
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • meshagent

Version
  • 2

Botnet
  • test

C2
  • http://mesh.tfo.k12.tr:443/agent.ashx

Attributes
  • mesh_id

    0xE616F73C4B5EFECF0987A68C0A5F05EC128FD2B3CD5E3B3FBF7D027ACACDA4C94BD9AB2097D14DA80EBEF2BE656E016E

  • server_id

    6A538AC19920D0C681214AF5DEEF1A7E0766C8BFC489E271BC63969078A5AC3BA62FF756AE7F984E0B016244BACF4BA0

  • wss

    wss://mesh.tfo.k12.tr:443/agent.ashx

Targets

    • Target
      2026-09-30_836ba85c5ce7b682f030840cdd233081_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
    • Size 3.3MB
    • SHA256 6f4081aa1a6b7e3259769b2be682f4b414cac6c2abff36321ea1e6136ec279f3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks