General
- Target cff90954322f7601ab61697ed2a0e62f3dbb865dafd756917700d1d37e492061.bin
- Size 3.3MB
- Sample260812-h3495ack6w
- SHA256 cff90954322f7601ab61697ed2a0e62f3dbb865dafd756917700d1d37e492061
- MD5 a4f2ebc86709c2f12682ca4b032285d7
- SHA1 91a60eba43f699a6c1092170e2056f08280f0f1d
- SHA512 e9ab77a66538b4d1cd2d52d223342da69d48cd52813ed1ea5f2cf57a4296ae50c20ce7d82e42ebbb4d19f1de0ffd5a60865251dec0b950fd061e62f55a798b6a
- SSDEEP 49152:tX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQeZ5a:tlRsZ47/QXoHUOfAoj1ko
- TLSH T18FF57CD2A7A600E8E977F23CC9568157E7F1B81343709BCF15A45A661F236E12B3E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
cff90954322f7601ab61697ed2a0e62f3dbb865dafd756917700d1d37e492061.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
cff90954322f7601ab61697ed2a0e62f3dbb865dafd756917700d1d37e492061.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
apolo
C2
-
http://aman.motadataserviceops.com:8443/agent.ashx
Attributes
-
mesh_id
0xD26EFEC699497A3C849F240A0C381EB649EDEEBD33680A0EE2FFD458BB3D3C8049DBB757FD3812E1FEAF8F14E52C8148
-
server_id
1F77E07A86BB3AB0C3DB8E96FB7D96D3DEA99F6009D0257B31B5BCB35E58B2BA087DF401DD113D4F0ED31C0E9F5C2116
-
wss
wss://aman.motadataserviceops.com:8443/agent.ashx
Targets
-
- Target cff90954322f7601ab61697ed2a0e62f3dbb865dafd756917700d1d37e492061.bin
- Size 3.3MB
- SHA256 cff90954322f7601ab61697ed2a0e62f3dbb865dafd756917700d1d37e492061
- MD5 a4f2ebc86709c2f12682ca4b032285d7
- SHA1 91a60eba43f699a6c1092170e2056f08280f0f1d
- SHA512 e9ab77a66538b4d1cd2d52d223342da69d48cd52813ed1ea5f2cf57a4296ae50c20ce7d82e42ebbb4d19f1de0ffd5a60865251dec0b950fd061e62f55a798b6a
- SSDEEP 49152:tX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQeZ5a:tlRsZ47/QXoHUOfAoj1ko
- TLSH T18FF57CD2A7A600E8E977F23CC9568157E7F1B81343709BCF15A45A661F236E12B3E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10