General
- Target df890911f7ad1782e059a87b3a566d59d90e0dd1d408a87083a827644ded8fd9.bin
- Size 3.3MB
- Sample260812-ndtpzsfl8v
- SHA256 df890911f7ad1782e059a87b3a566d59d90e0dd1d408a87083a827644ded8fd9
- MD5 b59fd20d01b478a33ea9468d4e13a0e5
- SHA1 c2369f164b1e68442a105eb1437c83a3e888b85b
- SHA512 31be01745654b63a688d3a26907354d723c5b09e1c5a1aca6a28e351e69482ac49bdbc112de9c74f14ce29dda291f1c9608ad3c805912f260679836c7805e88c
- SSDEEP 49152:SMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fa:zd9AddBcryO3cICgI9a
- TLSH T159F57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
df890911f7ad1782e059a87b3a566d59d90e0dd1d408a87083a827644ded8fd9.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
df890911f7ad1782e059a87b3a566d59d90e0dd1d408a87083a827644ded8fd9.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
home
C2
-
http://csuser.ddns.net:8443/agent.ashx
Attributes
-
mesh_id
0xBD841B55379C87A23FEDA1E370FCCAC20554FEF7BE549C4A85F0897B8F913826E45A0C557E20661557F2EF330EB28F12
-
server_id
19D4515990F26882CD8CE4FC65C48461A7AB325B093A7C1A7CCCD8A79518D470B56D1DD52875712905D1A4F321E538F2
-
wss
wss://csuser.ddns.net:8443/agent.ashx
Targets
-
- Target df890911f7ad1782e059a87b3a566d59d90e0dd1d408a87083a827644ded8fd9.bin
- Size 3.3MB
- SHA256 df890911f7ad1782e059a87b3a566d59d90e0dd1d408a87083a827644ded8fd9
- MD5 b59fd20d01b478a33ea9468d4e13a0e5
- SHA1 c2369f164b1e68442a105eb1437c83a3e888b85b
- SHA512 31be01745654b63a688d3a26907354d723c5b09e1c5a1aca6a28e351e69482ac49bdbc112de9c74f14ce29dda291f1c9608ad3c805912f260679836c7805e88c
- SSDEEP 49152:SMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fa:zd9AddBcryO3cICgI9a
- TLSH T159F57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10