General
- Target ad521cfc0204305217af78675d395de112b292a4956d9a32814a75484f1f72dc.bin
- Size 3.3MB
- Sample260821-h4bzzaak7z
- SHA256 ad521cfc0204305217af78675d395de112b292a4956d9a32814a75484f1f72dc
- MD5 373f8386c7a60e2093a1b1642c99a0fe
- SHA1 44cb7eddf1eb34fa4637eb19e8e73f97b7bc5fba
- SHA512 2e2a37f93e3e6fef948cb07aa0015058f79522d0af0105f4b6687ab2cde8a5781f90aab8be74b529f2f560fcd663ddbfe4645f8f50cfac52c38fb15b4af33def
- SSDEEP 49152:kX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qu:klRsZ47/QXoHUOfAoj1x6u
- TLSH T114F57CD2A7A600E8E977F23C89568517E7F1B81353709BCF15A44A660F236E12B3F712
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ad521cfc0204305217af78675d395de112b292a4956d9a32814a75484f1f72dc.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ad521cfc0204305217af78675d395de112b292a4956d9a32814a75484f1f72dc.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
MHA
C2
-
http://wikitravel.wiki:443/agent.ashx
Attributes
-
mesh_id
0x1D88B145D94737AB7B484A3B9EA538A2CAF2223F01C826963D827A192E410D03568D3807CB0ED21306B398FB06536825
-
server_id
0D076C37298A2938CAA85DFB0750C8B161FFB38D0071169E9D1FDC9C7F49CEB20D3CAE6C08509B806F599FC339C5B985
-
wss
wss://wikitravel.wiki:443/agent.ashx
Targets
-
- Target ad521cfc0204305217af78675d395de112b292a4956d9a32814a75484f1f72dc.bin
- Size 3.3MB
- SHA256 ad521cfc0204305217af78675d395de112b292a4956d9a32814a75484f1f72dc
- MD5 373f8386c7a60e2093a1b1642c99a0fe
- SHA1 44cb7eddf1eb34fa4637eb19e8e73f97b7bc5fba
- SHA512 2e2a37f93e3e6fef948cb07aa0015058f79522d0af0105f4b6687ab2cde8a5781f90aab8be74b529f2f560fcd663ddbfe4645f8f50cfac52c38fb15b4af33def
- SSDEEP 49152:kX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qu:klRsZ47/QXoHUOfAoj1x6u
- TLSH T114F57CD2A7A600E8E977F23C89568517E7F1B81353709BCF15A44A660F236E12B3F712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10