General

  • Target
    2026-09-30_63ec1c55a9977e7e912dadd70e33c5ab_coinminer_glassworm_icedid_njrat_ransomhub_ryuk
  • Size 3.3MB
  • Sample260930-m1apys1fqa
  • SHA256 4eabcd5dac7a2084147fea1e1641cff9165cbdfb80fbed9e25a12967e55a1de6
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • meshagent

Version
  • 2

Botnet
  • UPS

C2
  • http://meshcentral.unggulgroup.com:443/agent.ashx

Attributes
  • mesh_id

    0xC92E7C8DB4C672B2A9C4432E9CACED30C354FC09659B843FCFD61CBF6FBFD3DE316DD37AA1CF1A16EA754B1BDA4F5422

  • server_id

    8BEF1D96B2845F34D3077E6E03457BD3319292B9EEAF3238696F4A0C2E704393378AAE10E91E5877C92851DB17167F0B

  • wss

    wss://meshcentral.unggulgroup.com:443/agent.ashx

Targets

    • Target
      2026-09-30_63ec1c55a9977e7e912dadd70e33c5ab_coinminer_glassworm_icedid_njrat_ransomhub_ryuk
    • Size 3.3MB
    • SHA256 4eabcd5dac7a2084147fea1e1641cff9165cbdfb80fbed9e25a12967e55a1de6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks