General
- Target 2969f25a075f190d91b9ed14bcbc7e4aef5c34813ef424fddeead58aab827e57.bin
- Size 3.3MB
- Sample260728-xzst9ateph
- SHA256 2969f25a075f190d91b9ed14bcbc7e4aef5c34813ef424fddeead58aab827e57
- MD5 721cdf195eb534d465c22228fae394a7
- SHA1 c040038ac3af1744942ce9a8a3c5b5a796c5d78e
- SHA512 90b56d9b8533fc3c4de6cf085f33ca58d3c7e4e3a5880860ced05c097aedcb9017afb9ffa77301512312ac44104e58294250ca5a46bcfea981aba96473371525
- SSDEEP 49152:dMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5f+:2d9AddBcryO3cICgI9+
- TLSH T192F57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2969f25a075f190d91b9ed14bcbc7e4aef5c34813ef424fddeead58aab827e57.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
Endpoints
C2
-
http://marshparable.com:443/agent.ashx
Attributes
-
mesh_id
0xE03A10B0984872358902E5FA4236274FD2C25A90021775D8964FFDD64F1C66E3714D0D4F0017B3D4D9DF753AD36F8DAF
-
server_id
97515E8C1F51CA0C03BB22CD99812F22CB029246A816C344ACE3F4C6DF8D9DA03F1595CC2467B2ACC793BB5399005763
-
wss
wss://marshparable.com:443/agent.ashx
Targets
-
- Target 2969f25a075f190d91b9ed14bcbc7e4aef5c34813ef424fddeead58aab827e57.bin
- Size 3.3MB
- SHA256 2969f25a075f190d91b9ed14bcbc7e4aef5c34813ef424fddeead58aab827e57
- MD5 721cdf195eb534d465c22228fae394a7
- SHA1 c040038ac3af1744942ce9a8a3c5b5a796c5d78e
- SHA512 90b56d9b8533fc3c4de6cf085f33ca58d3c7e4e3a5880860ced05c097aedcb9017afb9ffa77301512312ac44104e58294250ca5a46bcfea981aba96473371525
- SSDEEP 49152:dMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5f+:2d9AddBcryO3cICgI9+
- TLSH T192F57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects MeshAgent payload