Overview

overview

10

Static

static

10

693dffc9b6...d1.exe

windows7-x64

1

693dffc9b6...d1.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    693dffc9b6380b83b6ba81183e3a68a27ef25ab6ed1326bc2a0fe4f2ef1429d1.exe

  • Size

    3.2MB

  • Sample

    241122-l1fersylgv

  • MD5

    7772dca41ea6d6c103909add590e19f8

  • SHA1

    6f32c4205a44088a46ef74e66a6d2c992882f5b8

  • SHA256

    693dffc9b6380b83b6ba81183e3a68a27ef25ab6ed1326bc2a0fe4f2ef1429d1

  • SHA512

    df66d31e0551eaa8ba7720e3edd0765feee46603d17486b505d9fe90baa90dd8d66cc207831a901659f4858b5917307e0615e3496b437c67bbd0510d60223c52

  • SSDEEP

    49152:PX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQeu:PlRsZ47/QXoHUOfAoj1t

Score
10/10
meshagentrobbin

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

robbin

C2

http://172.232.102.54:443/agent.ashx

Attributes
  • mesh_id

    0xF843C931D6D41192A06910CD216CBBC848B2593C2F62DE60305D39252F33789BCA17507D0ABB84DD3BE615F729B33938

  • server_id

    6BE103485BAC23D50467F1CF77DC0C324944B61664D5F0DBF5AD40BFF7083CCAFC5ECF27219AEDD7E61E561F6EC0267E

  • wss

    wss://172.232.102.54:443/agent.ashx

Targets

    • Target

      693dffc9b6380b83b6ba81183e3a68a27ef25ab6ed1326bc2a0fe4f2ef1429d1.exe

    • Size

      3.2MB

    • MD5

      7772dca41ea6d6c103909add590e19f8

    • SHA1

      6f32c4205a44088a46ef74e66a6d2c992882f5b8

    • SHA256

      693dffc9b6380b83b6ba81183e3a68a27ef25ab6ed1326bc2a0fe4f2ef1429d1

    • SHA512

      df66d31e0551eaa8ba7720e3edd0765feee46603d17486b505d9fe90baa90dd8d66cc207831a901659f4858b5917307e0615e3496b437c67bbd0510d60223c52

    • SSDEEP

      49152:PX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQeu:PlRsZ47/QXoHUOfAoj1t

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks