General
- Target 81a5f34a15439f269ad58565220492d0eb1de50ca63300938a4f376441c0fb80.bin
- Size 3.3MB
- Sample260801-ndsgxstdkb
- SHA256 81a5f34a15439f269ad58565220492d0eb1de50ca63300938a4f376441c0fb80
- MD5 3e9af926218519cca45151a2bd29cf89
- SHA1 9eeeaf095773722f4e66dbccb9fb7b426ae15706
- SHA512 126b755983221382a4f214a627021c4624d4496eb58638a6358dbf7b6dfe12e28f4dee8f5d461fd820273a9fad78e895b4871c017c18725fb373f51396442f41
- SSDEEP 49152:AdZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxA55:0HvfGfZvZj1/N/z/oAH
- TLSH T124F58DD2A3A600E8E9B7F23C85568517E7F1B81753709BCF16A44A760F236D52B3E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
81a5f34a15439f269ad58565220492d0eb1de50ca63300938a4f376441c0fb80.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
81a5f34a15439f269ad58565220492d0eb1de50ca63300938a4f376441c0fb80.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
Lion
C2
-
http://t1.linksupport.in:443/agent.ashx
Attributes
-
mesh_id
0x0B31070CE7099A6F91E2B6304A746EDD8A3340F5805834A89D2EBE94618AB954EC3D1FCC034AB60DA2D752991BDD301B
-
server_id
2DAE2C1CE98B833413637FCA39EFF2D2334F1EDDE0BA1D82795810483B6E6DC2BF858B4C604A90CC30FBD9A54CAF6186
-
wss
wss://t1.linksupport.in:443/agent.ashx
Targets
-
- Target 81a5f34a15439f269ad58565220492d0eb1de50ca63300938a4f376441c0fb80.bin
- Size 3.3MB
- SHA256 81a5f34a15439f269ad58565220492d0eb1de50ca63300938a4f376441c0fb80
- MD5 3e9af926218519cca45151a2bd29cf89
- SHA1 9eeeaf095773722f4e66dbccb9fb7b426ae15706
- SHA512 126b755983221382a4f214a627021c4624d4496eb58638a6358dbf7b6dfe12e28f4dee8f5d461fd820273a9fad78e895b4871c017c18725fb373f51396442f41
- SSDEEP 49152:AdZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxA55:0HvfGfZvZj1/N/z/oAH
- TLSH T124F58DD2A3A600E8E9B7F23C85568517E7F1B81753709BCF16A44A760F236D52B3E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10