General

  • Target
    MeshAgent2.exe
  • Size 3.3MB
  • Sample260701-mcxjtabv5m
  • SHA256 c961453707bcdc863f3e9e62b7a6b1f9ada38cfea7fe6a424e02cad145e284d9
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • meshagent

Version
  • 2

Botnet
  • TacticalRMM

C2
  • http://mesh.entercom.ua:443/agent.ashx

Attributes
  • mesh_id

    0x0AF57A5EC5B8B80945E7AFB49E6F4FC8DDB45566D4C5075B9FD71BA9287C66C3842829A9CCACCD7176DF96A3125A85BB

  • server_id

    2818F991FAF609A684B8857FDF65B3D8C4E784A96AEF177486356EB8C3709563D54C616EC4DBB7193CF5EEEE13D03547

  • wss

    wss://mesh.entercom.ua:443/agent.ashx

Targets

    • Target
      MeshAgent2.exe
    • Size 3.3MB
    • SHA256 c961453707bcdc863f3e9e62b7a6b1f9ada38cfea7fe6a424e02cad145e284d9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Matrix

Tasks