General

  • Target

    mesh.exe

  • Size

    3.3MB

  • Sample

    241104-rqadna1crc

  • MD5

    0d6e405856f8687fb1a06645a85bb0f3

  • SHA1

    703fe09716b5e92e984c3645157ae9703ed0227d

  • SHA256

    db8174175cec245f15f117503fd9e178307fb3763ea7e2e47541e80bfc953746

  • SHA512

    e7dd401629387eb0c942699333dcab6918df279728321c3e9cd105d2cd26e82ac88dfe1eca291dababce303e7248dfcca4be52c3a09cb79482cd09251cde0098

  • SSDEEP

    49152:PX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QxR:PlRsZ47/QXoHUOfAoj1x6xR

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

workgroup-09/28/2024

C2

http://94.232.43.185:443/agent.ashx

Attributes
  • mesh_id

    0xEE6F1C863FB7C6EF842533D34533A6378D918D5227918D7E0A0D32295A4DB86E517627EC63E43107A992624908FEFE63

  • server_id

    2BD4C9024778AB65C894FE006870F2822FD2EE492C09B410A85E50D4766668DCFF3ACA2B8AEFE4104B0ACC243B51B701

  • wss

    wss://94.232.43.185:443/agent.ashx

Targets

    • Target

      mesh.exe

    • Size

      3.3MB

    • MD5

      0d6e405856f8687fb1a06645a85bb0f3

    • SHA1

      703fe09716b5e92e984c3645157ae9703ed0227d

    • SHA256

      db8174175cec245f15f117503fd9e178307fb3763ea7e2e47541e80bfc953746

    • SHA512

      e7dd401629387eb0c942699333dcab6918df279728321c3e9cd105d2cd26e82ac88dfe1eca291dababce303e7248dfcca4be52c3a09cb79482cd09251cde0098

    • SSDEEP

      49152:PX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QxR:PlRsZ47/QXoHUOfAoj1x6xR

    Score
    1/10

MITRE ATT&CK Matrix

Tasks