Overview

overview

10

Static

static

10

56ba13c972...fe.exe

windows7-x64

1

56ba13c972...fe.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    56ba13c972e2ed971c7b35da0d288f17a6a9ce89c3e8c785f1a94cb8a5936efe.exe

  • Size

    3.3MB

  • Sample

    241203-k6r53symey

  • MD5

    35660bd3a4c23443b6715721b7274592

  • SHA1

    856041030db30bf658beb76e61c8257600b51223

  • SHA256

    56ba13c972e2ed971c7b35da0d288f17a6a9ce89c3e8c785f1a94cb8a5936efe

  • SHA512

    e9c58c42f951f9d670f7b6e0d89de3dc4f4d3d070d468fbf589c3ce9385f70f618d7b3db12f9eb5c14df420fcc1fe60668dd52172b137ef160ac160df31c3094

  • SSDEEP

    49152:pX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QH:plRsZ47/QXoHUOfAoj1x6H

Score
10/10
meshagentmisc

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

Misc

C2

http://graymatter.cc:444/agent.ashx

Attributes
  • mesh_id

    0xEC88772BDE938D10F83B3BF8AC505A02F97EC92A958202E7E8A6E3F918E4EAF1B8350DB086941B293B3A9CE2192C065B

  • server_id

    B87D14C679C9BC005DD544BACB5989D8928A2D5EBE240B42C94593358CD0B7255C33430268CC0B2AC967E698C6544D9B

  • wss

    wss://graymatter.cc:444/agent.ashx

Targets

    • Target

      56ba13c972e2ed971c7b35da0d288f17a6a9ce89c3e8c785f1a94cb8a5936efe.exe

    • Size

      3.3MB

    • MD5

      35660bd3a4c23443b6715721b7274592

    • SHA1

      856041030db30bf658beb76e61c8257600b51223

    • SHA256

      56ba13c972e2ed971c7b35da0d288f17a6a9ce89c3e8c785f1a94cb8a5936efe

    • SHA512

      e9c58c42f951f9d670f7b6e0d89de3dc4f4d3d070d468fbf589c3ce9385f70f618d7b3db12f9eb5c14df420fcc1fe60668dd52172b137ef160ac160df31c3094

    • SSDEEP

      49152:pX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QH:plRsZ47/QXoHUOfAoj1x6H

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks