Overview

overview

10

Static

static

10

b49a7117e4...a2.exe

windows10-2004-x64

1

b49a7117e4...a2.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    b49a7117e4a080a2cf8b0e18cdd1d92eea5671181001d30e01ae3778cb4bfda2.bin
  • Size 3.3MB
  • Sample260812-bn23wswejf
  • SHA256 b49a7117e4a080a2cf8b0e18cdd1d92eea5671181001d30e01ae3778cb4bfda2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
meshagenttacticalrmmbackdoorrattrojan

Malware Config

Extracted

Family

  • meshagent

Version

  • 2

Botnet

  • TacticalRMM

C2

  • http://mesh.jerdal.no:443/agent.ashx

Attributes
  • mesh_id

    0x863E3F134F81661620D5D7CA84DC0FFA78FE66C04B55145E8AB95232EF503881FE674FAD824291D8F99FFC4AAD5E3A5A

  • server_id

    59FEA6FF717CF6689C711668622EE09D24C49DD1C2C6945137ACBC5B4318CDC91B13297BC869E05BB9D046F8748845D7

  • wss

    wss://mesh.jerdal.no:443/agent.ashx

Targets

    • Target
      b49a7117e4a080a2cf8b0e18cdd1d92eea5671181001d30e01ae3778cb4bfda2.bin
    • Size 3.3MB
    • SHA256 b49a7117e4a080a2cf8b0e18cdd1d92eea5671181001d30e01ae3778cb4bfda2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks