Overview

overview

10

Static

static

10

e92e91a417...29.exe

windows10-2004-x64

1

e92e91a417...29.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    e92e91a417383ae60f3295161cadc69bf5f3c03079ef1dc9d8b9bc70f9039129.bin
  • Size 3.3MB
  • Sample260727-nd3yna1bke
  • SHA256 e92e91a417383ae60f3295161cadc69bf5f3c03079ef1dc9d8b9bc70f9039129
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
meshagentserkovobackdoorrattrojan

Malware Config

Extracted

Family

  • meshagent

Version

  • 2

Botnet

  • Serkovo

C2

  • http://10.20.20.72:443/agent.ashx

Attributes
  • mesh_id

    0x2D6065DDDB36BFF1A8934AFD4667708F8C7999C0E2BA364AD30A23F743D76563320E2F5C35BCFDB8542CD559C40BC39E

  • server_id

    2EA1A6F02313404953A26E0A5EB0921C88E2D0062F392C3C2C6964DD01B03991F61170BBF4C2586210DE853C4273D069

  • wss

    wss://10.20.20.72:443/agent.ashx

Targets

    • Target
      e92e91a417383ae60f3295161cadc69bf5f3c03079ef1dc9d8b9bc70f9039129.bin
    • Size 3.3MB
    • SHA256 e92e91a417383ae60f3295161cadc69bf5f3c03079ef1dc9d8b9bc70f9039129
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks