Overview

overview

10

Static

static

10

f42a3f28d7...ed.exe

windows10-2004-x64

1

f42a3f28d7...ed.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    f42a3f28d76c35b16b4697505fe83a6c70a6d70863460519ead0a613d29cd6ed.bin
  • Size 3.3MB
  • Sample260805-sn41xszcle
  • SHA256 f42a3f28d76c35b16b4697505fe83a6c70a6d70863460519ead0a613d29cd6ed
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
meshagentkigsbackdoorrattrojan

Malware Config

Extracted

Family

  • meshagent

Version

  • 2

Botnet

  • kigs

C2

  • http://fernweh.dstkiel.de:443/agent.ashx

Attributes
  • mesh_id

    0x94B1FEE511302E9468080E4940156584C08BDA1DBF2BA5401FDB8CA55F02976BAEE22150062CBD476DBE591D02CFBB90

  • server_id

    7E5DBB8958245F5CA0ACBF844F1B6AC3AA50AE88F610C2D8B68BA1BDBDE5435C8DCEFAF0BA7275C09CAB0912F5EE7F86

  • wss

    wss://fernweh.dstkiel.de:443/agent.ashx

Targets

    • Target
      f42a3f28d76c35b16b4697505fe83a6c70a6d70863460519ead0a613d29cd6ed.bin
    • Size 3.3MB
    • SHA256 f42a3f28d76c35b16b4697505fe83a6c70a6d70863460519ead0a613d29cd6ed
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks