General
- Target c4fab53e025a7d0c1d60039a89540d70e726c026aa81fbc20f590344ef9b30ab.bin
- Size 3.3MB
- Sample260815-xztrjssdph
- SHA256 c4fab53e025a7d0c1d60039a89540d70e726c026aa81fbc20f590344ef9b30ab
- MD5 86c350c5ac7afe4b20ed5b023da429cc
- SHA1 8fb9349df7e8565af61fd66e5a4c65668c52cadf
- SHA512 692c5b5b7283a428848bb77579d730df833f4b1ff6ccbdab453f349f65972ed54b934adca9b5d9f8d671022f6598d0f2f2609c55d07d812fc9df37e3636929ca
- SSDEEP 49152:SMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5f7:zd9AddBcryO3cICgI97
- TLSH T119F57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
c4fab53e025a7d0c1d60039a89540d70e726c026aa81fbc20f590344ef9b30ab.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
c4fab53e025a7d0c1d60039a89540d70e726c026aa81fbc20f590344ef9b30ab.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
Tailscale-Devices
C2
-
http://100.84.152.35:443/agent.ashx
Attributes
-
mesh_id
0xA8ADC603FDACBC2D4A63A59C3D451CBD6F66CCE0524371FABE8D0FDCC4946D5F4CE8C14254BD4CF5B4235069BC131BEB
-
server_id
19AD5700A52632F00B7020FA6F4520EB269820C72C62DF08B8545A52D6564279B50F4763620B629E1BDCA7DC19DF6A0D
-
wss
wss://100.84.152.35:443/agent.ashx
Targets
-
- Target c4fab53e025a7d0c1d60039a89540d70e726c026aa81fbc20f590344ef9b30ab.bin
- Size 3.3MB
- SHA256 c4fab53e025a7d0c1d60039a89540d70e726c026aa81fbc20f590344ef9b30ab
- MD5 86c350c5ac7afe4b20ed5b023da429cc
- SHA1 8fb9349df7e8565af61fd66e5a4c65668c52cadf
- SHA512 692c5b5b7283a428848bb77579d730df833f4b1ff6ccbdab453f349f65972ed54b934adca9b5d9f8d671022f6598d0f2f2609c55d07d812fc9df37e3636929ca
- SSDEEP 49152:SMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5f7:zd9AddBcryO3cICgI97
- TLSH T119F57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10