Extracted

• • Target

    https://www.youtude.net/watch?v=i50wel2lVsw

  Score

  10^/10

  meshagentclickfixbackdoordiscoveryexecutionpersistencerattrojan

  • Detects MeshAgent payload

  • MeshAgent

    MeshAgent is an open source remote access trojan written in C++.

    rattrojanbackdoormeshagent

  • Meshagent family

    meshagent

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution

  • Sets service image path in registry

    persistence

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1