Overview

overview

10

Static

static

10

RuntimeBro...up.exe

windows10-2004-x64

1

RuntimeBro...up.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    RuntimeBroker64-ExamGroup.exe
  • Size 3.4MB
  • Sample260804-rk73qscb32
  • SHA256 e049496be6a87d5fc5c8184256c25ac50ead71decd482b7ee79fd7978657f2d6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
meshagentexam groupbackdoorrattrojan

Malware Config

Extracted

Family

  • meshagent

Version

  • 2

Botnet

  • Exam Group

C2

  • http://admintools.getexamassist.com:443/agent.ashx

Attributes
  • mesh_id

    0x68A1CE26FFFADC53C78D0695A7BC951E3094545CD42F11C91617EEB224853072664900D5B36F0F5E9F71B523C276EF05

  • server_id

    52403158C3D5A3141C84C7FE9A2D55962029A2E2B6837DBDAFEFA073A49F664BE9F6385ECC6BE5020DD293C185416E92

  • wss

    wss://admintools.getexamassist.com:443/agent.ashx

Targets

    • Target
      RuntimeBroker64-ExamGroup.exe
    • Size 3.4MB
    • SHA256 e049496be6a87d5fc5c8184256c25ac50ead71decd482b7ee79fd7978657f2d6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks