Analysis
- max time kernel
149s - max time network
132s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
08/08/2026, 23:17
General
- Target aec96bd776177a743dbef98cf7eabbcc0002458a210032659c6f97528850bb8b.exe
- Size 3.4MB
- Sample260808-29p9bsem9x
- SHA256 aec96bd776177a743dbef98cf7eabbcc0002458a210032659c6f97528850bb8b
Malware Config
Extracted
-
meshagent
-
2
-
Support
-
http://lv.learnwavetechnologies.co.in:443/agent.ashx
-
mesh_id
0x598098E6D1573C7821B53BF6476C8843B9FEFB085E4DB5AE275DD85CE682A9E3B70589FD5AE713ACF98AB7483C24D92B
-
server_id
714C2DFC546F4AC89D973CF1E7A8A6759C58E07402B1E161A9A33EEE1A23DC47041BB9CB764777E1FCF1518321216651
-
wss
wss://lv.learnwavetechnologies.co.in:443/agent.ashx
Signatures
- Family: MeshAgent
MeshAgent is an open source remote access trojan written in C++.
- Detects MeshAgent payload 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\aec96bd776177a743dbef98cf7eabbcc0002458a210032659c6f97528850bb8b.exe"C:\Users\Admin\AppData\Local\Temp\aec96bd776177a743dbef98cf7eabbcc0002458a210032659c6f97528850bb8b.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2164-0-0x00007FFE519BF000-0x00007FFE519C0000-memory.dmp
memory/2164-1-0x0000000000A10000-0x0000000000D7C000-memory.dmp
memory/2164-2-0x00007FFE51830000-0x00007FFE521D4000-memory.dmp
memory/2164-3-0x00007FFE51830000-0x00007FFE521D4000-memory.dmp
memory/2164-4-0x00007FFE51830000-0x00007FFE521D4000-memory.dmp
memory/2164-5-0x00007FFE51830000-0x00007FFE521D4000-memory.dmp
memory/2164-6-0x00007FFE51830000-0x00007FFE521D4000-memory.dmp
memory/2164-7-0x00007FFE51830000-0x00007FFE521D4000-memory.dmp
memory/2164-8-0x00007FFE51830000-0x00007FFE521D4000-memory.dmp