General

  • Target
    m64.exe
  • Size 3.3MB
  • Sample260818-ppqcdatvfz
  • SHA256 cf7d67657e6d87a4267a83695c9fbc2fc9984164b633ab0c8ec689ef77716172
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • meshagent

Version
  • 2

Botnet
  • Labs

C2
  • http://ro.vinro.my.id:443/agent.ashx

Attributes
  • mesh_id

    0x9DC117044F2F92A99D0F4AAA96934E9614E2744CDE3C89F8A5562C64476B415914BA6E025606CF3A30B6115A68E2C3D2

  • server_id

    D121CD1711C33C68AA8E104EB99EF70DE3D7F2585A7AD14E9C879F34C95140688A6439A6507F5846DA68D9310C6C546D

  • wss

    wss://ro.vinro.my.id:443/agent.ashx

Targets

    • Target
      m64.exe
    • Size 3.3MB
    • SHA256 cf7d67657e6d87a4267a83695c9fbc2fc9984164b633ab0c8ec689ef77716172
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Matrix

Tasks