meshagent

General

Target
fabfaa8fe68a80b286ea7291977e73a830320db89c9acdbfc3373884246f6373.exe
Size 1.6MB
Sample240825-pdvgystdlc
SHA256 fabfaa8fe68a80b286ea7291977e73a830320db89c9acdbfc3373884246f6373
MD5 dc37d19933e5689c25bc6cce8c15d58c
SHA1 5465ed40e9ce77663bcb5213cf7deb6bded25804
SHA512 15ca53e95a2e74d17b87778354ed7508192fb2225ca6c40db7693909c35b02726472f19b060be878c02f5d89c17f99ffaf7600289f82930fdfd28507fa1b881d
SSDEEP 24576:zadIJEV+Vz4OjRZMpM2wSZB8Q04KfA3NapQpN65NlwBy8rTx3ZmIkmu3ylHAhf8:WIii8uqMIBv09cNgHwBy8rVkUkyR+U
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Targets

- Target
  fabfaa8fe68a80b286ea7291977e73a830320db89c9acdbfc3373884246f6373.exe
- Size 1.6MB
- SHA256 fabfaa8fe68a80b286ea7291977e73a830320db89c9acdbfc3373884246f6373
- MD5 dc37d19933e5689c25bc6cce8c15d58c
- SHA1 5465ed40e9ce77663bcb5213cf7deb6bded25804
- SHA512 15ca53e95a2e74d17b87778354ed7508192fb2225ca6c40db7693909c35b02726472f19b060be878c02f5d89c17f99ffaf7600289f82930fdfd28507fa1b881d
- SSDEEP 24576:zadIJEV+Vz4OjRZMpM2wSZB8Q04KfA3NapQpN65NlwBy8rTx3ZmIkmu3ylHAhf8:WIii8uqMIBv09cNgHwBy8rVkUkyR+U
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

meshagent backdoor discovery persistence trojan
- Detects MeshAgent payload
- MeshAgent
  MeshAgent is a trojan written in C++.
  trojan backdoor meshagent
- Sets service image path in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2
- Target
  leonardo-mesh.exe
- Size 3.7MB
- SHA256 7c4ac45d254e50dac72902c8f0cd2b5eb474818c15a01887e6b8ed5ed71cac8d
- MD5 e15811177975fb1c9e916807aa6a9f3a
- SHA1 5c64afef7bb8770f897b424dc91352ae472bb637
- SHA512 3aebb5ef4cafaf2dfffebbfad427aa48be6148222b5896f4f7f575720b09e24af4c05936aa37342d26b6f7d6c0b502a44697944274b725facd1dd8a212142f92
- SSDEEP 49152:v8o8bZjyJVD0s9Mr3XIfRviWkgEOaxfCbCMcXGtSgvZPOQ5Qj:v8o8VOUs9joRbMc2tSW6j
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral3 behavioral4