Overview

overview

10

Static

static

10

svhost.exe

windows7-x64

1

svhost.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    svhost.exe
  • Size 3.3MB
  • Sample250103-prrcfstnfv
  • SHA256 4ecec027e6d792ca054809bab915d600c9646c6a11e5884ab06eddeb9937d6f6
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
meshagent111

Malware Config

Extracted

Family

  • meshagent

Version

  • 2

Botnet

  • 111

C2

  • http://46.175.167.116:444/agent.ashx

Attributes
  • mesh_id

    0xA12A7C664B497CD4C929099C38B8DCAAF92DF97734F0FDEF31ECAA80D3A2C22FBE1FA3A048C0212E384DE1F8A9CC2185

  • server_id

    C710E9869C5983A0452483FB1633CA857EEB00ACBE0D0104E0A1CF4E19C677249DC82403254B3AC2DAF0684D2B9C7D93

  • wss

    wss://46.175.167.116:444/agent.ashx

Targets

    • Target
      svhost.exe
    • Size 3.3MB
    • SHA256 4ecec027e6d792ca054809bab915d600c9646c6a11e5884ab06eddeb9937d6f6
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks