General
- Target 571860782811bed016341f78547688ed3a3429981bbdfe0285fcc2ddee2219cb.bin
- Size 3.3MB
- Sample260729-labznadj9v
- SHA256 571860782811bed016341f78547688ed3a3429981bbdfe0285fcc2ddee2219cb
- MD5 5f4016de0ba9a3959c69a031004722de
- SHA1 028fa177275e432adbccab555c3eef25ada3d3fc
- SHA512 01607335a736195c43bf7ad1f5b7f882bd79823b37a5fd3f60bfda447b62663d3a02ff9f2047fe820983fe3f31c3c735ab5ad1456813d2a09d60daa6f46fa019
- SSDEEP 49152:zdZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxw5ba:RHvfGfZvZj1/N/z/owJa
- TLSH T17DF58DD2A3A600E8E9B7F23C85568517E7F2B81753709BCF15A44A761F236D12B3E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
571860782811bed016341f78547688ed3a3429981bbdfe0285fcc2ddee2219cb.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
571860782811bed016341f78547688ed3a3429981bbdfe0285fcc2ddee2219cb.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
LUCKY | BARSYK
C2
-
http://mesh.zoorroo.icu:443/agent.ashx
Attributes
-
mesh_id
0x4401B3934319EA67AB0BF2E3BDE11BBF088816EFCD0B319D48D4C481D8E07E4A67680AEC5DE3EC416403F872A51E22AB
-
server_id
D5E5A0BBF0C8F459722B46ADA23381CB1895D7541DCA57B0B08C0A3E72A4413F18FB53896BE77CB084EFD4D2615680F5
-
wss
wss://mesh.zoorroo.icu:443/agent.ashx
Targets
-
- Target 571860782811bed016341f78547688ed3a3429981bbdfe0285fcc2ddee2219cb.bin
- Size 3.3MB
- SHA256 571860782811bed016341f78547688ed3a3429981bbdfe0285fcc2ddee2219cb
- MD5 5f4016de0ba9a3959c69a031004722de
- SHA1 028fa177275e432adbccab555c3eef25ada3d3fc
- SHA512 01607335a736195c43bf7ad1f5b7f882bd79823b37a5fd3f60bfda447b62663d3a02ff9f2047fe820983fe3f31c3c735ab5ad1456813d2a09d60daa6f46fa019
- SSDEEP 49152:zdZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxw5ba:RHvfGfZvZj1/N/z/owJa
- TLSH T17DF58DD2A3A600E8E9B7F23C85568517E7F2B81753709BCF15A44A761F236D12B3E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10