General

  • Target
    ad521cfc0204305217af78675d395de112b292a4956d9a32814a75484f1f72dc.bin
  • Size 3.3MB
  • Sample260821-h4bzzaak7z
  • SHA256 ad521cfc0204305217af78675d395de112b292a4956d9a32814a75484f1f72dc
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • meshagent

Version
  • 2

Botnet
  • MHA

C2
  • http://wikitravel.wiki:443/agent.ashx

Attributes
  • mesh_id

    0x1D88B145D94737AB7B484A3B9EA538A2CAF2223F01C826963D827A192E410D03568D3807CB0ED21306B398FB06536825

  • server_id

    0D076C37298A2938CAA85DFB0750C8B161FFB38D0071169E9D1FDC9C7F49CEB20D3CAE6C08509B806F599FC339C5B985

  • wss

    wss://wikitravel.wiki:443/agent.ashx

Targets

    • Target
      ad521cfc0204305217af78675d395de112b292a4956d9a32814a75484f1f72dc.bin
    • Size 3.3MB
    • SHA256 ad521cfc0204305217af78675d395de112b292a4956d9a32814a75484f1f72dc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Matrix

Tasks