Overview

overview

10

Static

static

10

meshagent6...1).exe

windows7-x64

1

meshagent6...1).exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    meshagent64-test (1).exe

  • Size

    3.3MB

  • MD5

    36dd1f52808bc6c95b104ca4b74c8e6a

  • SHA1

    9814398ab1fa76d18952c3e591bc173deb397e9f

  • SHA256

    f93fda1b2b185a95ee069081e42a58f6cc8d105c0b859696b67db00967a835f7

  • SHA512

    a2f765f34a610059e741faa296ff9699b2b87af23df90824eacf2af337e26b80883c2bf6080bfaad3b4eb5f2a58bce765832d1c09064f042ce21d05677c41ba9

  • SSDEEP

    49152:YdZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxw5bo:cHvfGfZvZj1/N/z/owJo

Score
10/10
testmeshagent

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

test

Attributes
  • mesh_id

    0xBAAC9AE409F4814112B0BCB6CEC1BB2060FF988AAC5B1EBC37305F946B7DD19682DAA25FE0EA403C76A50EC593316E5F

  • server_id

    6BCD039A3454760E09EE7BFA6EB2A0F65A5F903D90EBA25FEA531F167630DF6B89F39F9E1CEF9D75CAD4B57AC61E0644

  • wss

    localhost

Signatures

  • Detects MeshAgent payload 1 IoCs
  • Meshagent family
    meshagent
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • meshagent64-test (1).exe
    .exe windows:6 windows x64 arch:x64

    fb0a8b4a81655f744a37af985e009476


    Headers

    Imports

    Sections