General
- Target 2cb2f45cfdecd8e77237648294008626c997a5aa7f2a1d11be6750929319ce2c.bin
- Size 3.7MB
- Sample260803-3aav2assbv
- SHA256 2cb2f45cfdecd8e77237648294008626c997a5aa7f2a1d11be6750929319ce2c
- MD5 f937c0214121df16e475bf74ab8186aa
- SHA1 24b6123b5260c273166df9721f16580510c0df6a
- SHA512 4642dada2cfde13fa6033f5f9ea7cb6a65d0a6fe1f68018628a84baa90c53378c5331e551f7181a94eac9d374da0883ff880048b7ec6309997afbaeea1630208
- SSDEEP 49152:QNS2PF6/S6QfJeZ+UawYjUAiwTtq3VFszQvZ/+OKc+ZPAqT5f9jJ:n2PFXLOa7tiNWMQOKp991
- TLSH T1AB06AEC2BB834471F8A736B411AB53BE5D7D69530328D4C397D429E98C316D0AE3B39A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2cb2f45cfdecd8e77237648294008626c997a5aa7f2a1d11be6750929319ce2c.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2cb2f45cfdecd8e77237648294008626c997a5aa7f2a1d11be6750929319ce2c.exe
Resource
win11ltsc2024-20260710-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
FUN Test
C2
-
http://funbz.fun-bildung.com:443/agent.ashx
Attributes
-
mesh_id
0x6FA1B620B5ED1499B7A338E532FBC52A4914FF815C00B138006ED5A42DBC95B85241D16CFFAD9D564D8C19E02F1D1B1D
-
server_id
9C42C886700B5D3445B40AA9A6EC8EC9D4E61A1CF299241D6F10E7941F33BD7CD3FF147F94497CB29172E7F005FD6908
-
wss
wss://funbz.fun-bildung.com:443/agent.ashx
Targets
-
- Target 2cb2f45cfdecd8e77237648294008626c997a5aa7f2a1d11be6750929319ce2c.bin
- Size 3.7MB
- SHA256 2cb2f45cfdecd8e77237648294008626c997a5aa7f2a1d11be6750929319ce2c
- MD5 f937c0214121df16e475bf74ab8186aa
- SHA1 24b6123b5260c273166df9721f16580510c0df6a
- SHA512 4642dada2cfde13fa6033f5f9ea7cb6a65d0a6fe1f68018628a84baa90c53378c5331e551f7181a94eac9d374da0883ff880048b7ec6309997afbaeea1630208
- SSDEEP 49152:QNS2PF6/S6QfJeZ+UawYjUAiwTtq3VFszQvZ/+OKc+ZPAqT5f9jJ:n2PFXLOa7tiNWMQOKp991
- TLSH T1AB06AEC2BB834471F8A736B411AB53BE5D7D69530328D4C397D429E98C316D0AE3B39A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10