General

  • Target
    2969f25a075f190d91b9ed14bcbc7e4aef5c34813ef424fddeead58aab827e57.bin
  • Size 3.3MB
  • Sample260728-xzst9ateph
  • SHA256 2969f25a075f190d91b9ed14bcbc7e4aef5c34813ef424fddeead58aab827e57
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • meshagent

Version
  • 2

Botnet
  • Endpoints

C2
  • http://marshparable.com:443/agent.ashx

Attributes
  • mesh_id

    0xE03A10B0984872358902E5FA4236274FD2C25A90021775D8964FFDD64F1C66E3714D0D4F0017B3D4D9DF753AD36F8DAF

  • server_id

    97515E8C1F51CA0C03BB22CD99812F22CB029246A816C344ACE3F4C6DF8D9DA03F1595CC2467B2ACC793BB5399005763

  • wss

    wss://marshparable.com:443/agent.ashx

Targets

    • Target
      2969f25a075f190d91b9ed14bcbc7e4aef5c34813ef424fddeead58aab827e57.bin
    • Size 3.3MB
    • SHA256 2969f25a075f190d91b9ed14bcbc7e4aef5c34813ef424fddeead58aab827e57
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects MeshAgent payload

    • Family: MeshAgent

      MeshAgent is an open source remote access trojan written in C++.

MITRE ATT&CK Matrix

Tasks