meshagent | 0924e745169d6192849fda2a8e4bc5824f415808689cbed370fd0bf1aade4b52

General

Target
2026-10-01_24b9c37621388affaee5c07cdaec3323_amadey_coinminer_elex_glassworm_luca-stealer_njrat_ransomhub_remcos_revil_smoke-loader
Size 3.7MB
Sample261003-1e319sff74
SHA256 0924e745169d6192849fda2a8e4bc5824f415808689cbed370fd0bf1aade4b52
MD5 24b9c37621388affaee5c07cdaec3323
SHA1 f111eae3a66a55b85f2e670dd4b1cfe1306808d3
SHA512 15e050c6554c73fd875b39eb7e0bbcf2bfa083d7bd4fb000af1cd3f9bc9326afefa61d66a719696df6b42c59de8db4205107819be7c43f7063ece7b471967c12
SSDEEP 49152:FNS2PF6/S6QfJeZ+UawYjUAiwTtq3VFszQvZ/+OKc+ZPAq65EjB:62PFXLOa7tiNWMQOK06V
TLSH
T1C506AEC2BB834071F8A736B511AB53BE5D7D69530328D4C397D429E98C316D0AE3B39A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

meshagent csr (bosnia and herzegovina)backdoor discovery rat trojan

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

CSR (Bosnia and Herzegovina)

C2

http://79.124.58.86:443/agent.ashx

Attributes

mesh_id
0x0DFC7CBCFB6D412DE4776B7A22CBA8B843213498996034B2B5822B93027BB2E5FA2298C1E7BA44D716AF6342814CD44D
server_id
5DA21512C245555A02D97EB717E2A175990CAD2FBB1AB84B4835C5251C0FA043998594593B95942F75719C27BB947B77
wss
wss://79.124.58.86:443/agent.ashx

Targets

- Target
  2026-10-01_24b9c37621388affaee5c07cdaec3323_amadey_coinminer_elex_glassworm_luca-stealer_njrat_ransomhub_remcos_revil_smoke-loader
- Size 3.7MB
- SHA256 0924e745169d6192849fda2a8e4bc5824f415808689cbed370fd0bf1aade4b52
- MD5 24b9c37621388affaee5c07cdaec3323
- SHA1 f111eae3a66a55b85f2e670dd4b1cfe1306808d3
- SHA512 15e050c6554c73fd875b39eb7e0bbcf2bfa083d7bd4fb000af1cd3f9bc9326afefa61d66a719696df6b42c59de8db4205107819be7c43f7063ece7b471967c12
- SSDEEP 49152:FNS2PF6/S6QfJeZ+UawYjUAiwTtq3VFszQvZ/+OKc+ZPAq65EjB:62PFXLOa7tiNWMQOK06V
- TLSH
  T1C506AEC2BB834071F8A736B511AB53BE5D7D69530328D4C397D429E98C316D0AE3B39A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

System Network Configuration Discovery

1

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2