General

  • Target

    7cc54b9a960c3197e47bf0f81469e397404f0e9aa05fc8a493004f1e3df79589N

  • Size

    3.3MB

  • Sample

    241013-yzlxdawdpg

  • MD5

    773abf848ac73f2fa16eababc7d18e60

  • SHA1

    3f02032efd7a03b9777da1609b740e0401e1c557

  • SHA256

    7cc54b9a960c3197e47bf0f81469e397404f0e9aa05fc8a493004f1e3df79589

  • SHA512

    dbd08dc9e34c447f25c45b8dfd1b5a34df4058eeb20fa5b9d09932e3641842d4c0887005070769ab5b54a10bbd638fcdfc109198eba9877d4506d9b983269d6a

  • SSDEEP

    49152:aX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qk:alRsZ47/QXoHUOfAoj1x6k

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

07 - Pochutla

C2

http://zimatpuerto.ddns.net:443/agent.ashx

Attributes
  • mesh_id

    0x4B528650E093586D8D2FEF584291A1E64D484E51CE744C1391470E4F05880F76470029EBC8C0BC29BC39A563E9F646D7

  • server_id

    E8E4BC60C102F609650508E173D0F8CFE597E7D03C9AE64D60C9D5E9EF560C75F4AEB8CAB6D2146D02CB02FF810F6380

  • wss

    wss://zimatpuerto.ddns.net:443/agent.ashx

Targets

    • Target

      7cc54b9a960c3197e47bf0f81469e397404f0e9aa05fc8a493004f1e3df79589N

    • Size

      3.3MB

    • MD5

      773abf848ac73f2fa16eababc7d18e60

    • SHA1

      3f02032efd7a03b9777da1609b740e0401e1c557

    • SHA256

      7cc54b9a960c3197e47bf0f81469e397404f0e9aa05fc8a493004f1e3df79589

    • SHA512

      dbd08dc9e34c447f25c45b8dfd1b5a34df4058eeb20fa5b9d09932e3641842d4c0887005070769ab5b54a10bbd638fcdfc109198eba9877d4506d9b983269d6a

    • SSDEEP

      49152:aX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qk:alRsZ47/QXoHUOfAoj1x6k

    Score
    1/10

MITRE ATT&CK Matrix

Tasks