Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

e21f756e9c...db.exe

windows7-x64

3

e21f756e9c...db.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e21f756e9c35d3cbf7afecebaa6b5560269bda99e40017776cc727c15cc171db

  • Size

    3.7MB

  • Sample

    241025-tt6mdayncq

  • MD5

    8504e4a351f45a3989b93404cff1bc2f

  • SHA1

    ed10fddcf5ecca8a01f70ff9de9019f41738b444

  • SHA256

    e21f756e9c35d3cbf7afecebaa6b5560269bda99e40017776cc727c15cc171db

  • SHA512

    051ccdb40afe65e4cc6d3c5ee0c9d8d727f93cbd854a12ae077af0c57ec6845276d84b9c4e00ee8c8ef721b6868d0784a48b9c34c8d60f10603fdb118c0d56f1

  • SSDEEP

    49152:k8o8bZjyJVD0s9Mr3XIfRviWkgEOaxfCbCMcXGtSgvZPOS5Pz:k8o8VOUs9joRbMc2tS8xz

Score
10/10
meshagenthuiladiscovery

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

huila

C2

http://193.46.255.73:443/agent.ashx

Attributes
  • mesh_id

    0xFA5D02881555B3286DA0352F468471531DA9523616604B1FD8E594755D54C2EB779AA0C097286B31CFE640256093DC75

  • server_id

    38C87A59D8DA58C7A7F12A7830D25E5D849272811E90124F6A4059C3EB86F2BFA6C9C793837901C5639BC53239220AA0

  • wss

    wss://193.46.255.73:443/agent.ashx

Targets

    • Target

      e21f756e9c35d3cbf7afecebaa6b5560269bda99e40017776cc727c15cc171db

    • Size

      3.7MB

    • MD5

      8504e4a351f45a3989b93404cff1bc2f

    • SHA1

      ed10fddcf5ecca8a01f70ff9de9019f41738b444

    • SHA256

      e21f756e9c35d3cbf7afecebaa6b5560269bda99e40017776cc727c15cc171db

    • SHA512

      051ccdb40afe65e4cc6d3c5ee0c9d8d727f93cbd854a12ae077af0c57ec6845276d84b9c4e00ee8c8ef721b6868d0784a48b9c34c8d60f10603fdb118c0d56f1

    • SSDEEP

      49152:k8o8bZjyJVD0s9Mr3XIfRviWkgEOaxfCbCMcXGtSgvZPOS5Pz:k8o8VOUs9joRbMc2tS8xz

    Score
    3/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks