General
- Target ad65ae65ebcede8fe9173f84d79621ba4470fc89f680d556f0864ca7eb65313e.bin
- Size 3.3MB
- Sample260808-k8vnzstfmc
- SHA256 ad65ae65ebcede8fe9173f84d79621ba4470fc89f680d556f0864ca7eb65313e
- MD5 7778a4f19c88f64518f5696989b40f81
- SHA1 e5d9325c7074e52dfdb2452858e14db05d78fbd5
- SHA512 218c7c3a59526682c828b906180fa02f7fe9f5c7361599aa20d0fcb7236d4ca96f42cb18960b418c55260ed94c6f785b10634c224fcc9880a64c5bc285a06ef8
- SSDEEP 49152:nMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5f2:Md9AddBcryO3cICgI92
- TLSH T108F57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ad65ae65ebcede8fe9173f84d79621ba4470fc89f680d556f0864ca7eb65313e.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
ad65ae65ebcede8fe9173f84d79621ba4470fc89f680d556f0864ca7eb65313e.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
NewUA
C2
-
http://89.106.83.125:443/agent.ashx
Attributes
-
mesh_id
0x4E2881CC322AC183C1361C259615E86A73145FD710C1AD5B5EFA057E70741C09EDDB39480A8801FF1153B81C6DE52867
-
server_id
7A03B4DB42FE87EC3D12CD78580D0102095D3B3C33E3B30581481EF0BCF32858662406517EEFC04F6F06276C1912B05F
-
wss
wss://89.106.83.125:443/agent.ashx
Targets
-
- Target ad65ae65ebcede8fe9173f84d79621ba4470fc89f680d556f0864ca7eb65313e.bin
- Size 3.3MB
- SHA256 ad65ae65ebcede8fe9173f84d79621ba4470fc89f680d556f0864ca7eb65313e
- MD5 7778a4f19c88f64518f5696989b40f81
- SHA1 e5d9325c7074e52dfdb2452858e14db05d78fbd5
- SHA512 218c7c3a59526682c828b906180fa02f7fe9f5c7361599aa20d0fcb7236d4ca96f42cb18960b418c55260ed94c6f785b10634c224fcc9880a64c5bc285a06ef8
- SSDEEP 49152:nMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5f2:Md9AddBcryO3cICgI92
- TLSH T108F57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10