Overview

overview

10

Static

static

10

e0c677beb3...ff.exe

windows10-2004-x64

10

e0c677beb3...ff.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    e0c677beb36aaa4335000ec0876fb0003dd09efc3b83e8bad6bd6ab231f5eaff.bin
  • Size 3.4MB
  • Sample260822-qjty2svclb
  • SHA256 e0c677beb36aaa4335000ec0876fb0003dd09efc3b83e8bad6bd6ab231f5eaff
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
meshagentsaik@9542backdoorrattrojan

Malware Config

Extracted

Family

  • meshagent

Version

  • 2

Botnet

  • Saik@9542

C2

  • http://certway.in:443/agent.ashx

Attributes
  • mesh_id

    0x0F4AB3DD4CA755E1B5B930F5D81F48D2C92A80099ED1682F265F8BB5A192686AA409C66482EBC1F0B8B43F2EA5657C93

  • server_id

    714C2DFC546F4AC89D973CF1E7A8A6759C58E07402B1E161A9A33EEE1A23DC47041BB9CB764777E1FCF1518321216651

  • wss

    wss://certway.in:443/agent.ashx

Targets

    • Target
      e0c677beb36aaa4335000ec0876fb0003dd09efc3b83e8bad6bd6ab231f5eaff.bin
    • Size 3.4MB
    • SHA256 e0c677beb36aaa4335000ec0876fb0003dd09efc3b83e8bad6bd6ab231f5eaff
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    backdoorsaik@9542meshagentrattrojan

    • Detects MeshAgent payload

    • Family: MeshAgent

      MeshAgent is an open source remote access trojan written in C++.

      rattrojanbackdoormeshagent
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks