Overview

overview

10

Static

static

10

2026-10-22...nj.exe

windows10-2004-x64

1

2026-10-22...nj.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-10-22_fa659a2d0d3d2508e64de52553716976_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_ransomhub_satacom_sliver_stealc
  • Size 5.6MB
  • Sample261023-bd84fsv1aw
  • SHA256 6646d24f2a6ec0777b2f2f2720fb7c587364bdf4d621878e5a90cec8234afbd5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
meshagentvue4exambackdoorrattrojan

Malware Config

Extracted

Family

  • meshagent

Version

  • 2

Botnet

  • Vue4exam

C2

  • http://awsvoucher.com:443/agent.ashx

Attributes
  • mesh_id

    0x0F3ECD613895027914E3966633942BEFC309979D4F5197D5707EBE487BFC128081A105E934C70F0FDD6B78A50045F097

  • server_id

    460435B76E2BA7A386C796547EE9B205E12F241B5E68453D37FB6DC55D7215361C5860C69962327ED15D48ACFF0C8280

  • wss

    wss://awsvoucher.com:443/agent.ashx

Targets

    • Target
      2026-10-22_fa659a2d0d3d2508e64de52553716976_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_ransomhub_satacom_sliver_stealc
    • Size 5.6MB
    • SHA256 6646d24f2a6ec0777b2f2f2720fb7c587364bdf4d621878e5a90cec8234afbd5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks