General
- Target 20cdb04a69818699254422ad0cd2da302d7427c5cebfd4d2c89df301778ce460.bin
- Size 3.3MB
- Sample260823-vvfm1shr3s
- SHA256 20cdb04a69818699254422ad0cd2da302d7427c5cebfd4d2c89df301778ce460
- MD5 03eddca049f0446c43694058bd963465
- SHA1 bc216f84e5cd9e11742c1c23386c3fd8068cbbd7
- SHA512 89d5fcc8637d9a9eee1cbf574331e12d9ad774b30ec5c8108b20b2c2cd82d5d94544371fe2e8923312cc8e963b32c6e26d8c92a8a98e0ce3150577dd1a4292b0
- SSDEEP 49152:TMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlJ5g:gd9AddBcryO3cICgJy
- TLSH T12EF57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
20cdb04a69818699254422ad0cd2da302d7427c5cebfd4d2c89df301778ce460.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
20cdb04a69818699254422ad0cd2da302d7427c5cebfd4d2c89df301778ce460.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
checker
C2
-
http://103.245.231.212:4430/agent.ashx
Attributes
-
mesh_id
0xADF727D6E689D92DED0445C7E5126900C2F896B026978A6959F0D1133BE0EB766364355D0D1258B8445A548FDDD57BF9
-
server_id
7E2E54BF28E9F396B9CF20452B975D17BCC30280F34CBE4382CA30D0B04012CD7A299F8EA68C2B45B33E762FB87A1529
-
wss
wss://103.245.231.212:4430/agent.ashx
Targets
-
- Target 20cdb04a69818699254422ad0cd2da302d7427c5cebfd4d2c89df301778ce460.bin
- Size 3.3MB
- SHA256 20cdb04a69818699254422ad0cd2da302d7427c5cebfd4d2c89df301778ce460
- MD5 03eddca049f0446c43694058bd963465
- SHA1 bc216f84e5cd9e11742c1c23386c3fd8068cbbd7
- SHA512 89d5fcc8637d9a9eee1cbf574331e12d9ad774b30ec5c8108b20b2c2cd82d5d94544371fe2e8923312cc8e963b32c6e26d8c92a8a98e0ce3150577dd1a4292b0
- SSDEEP 49152:TMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlJ5g:gd9AddBcryO3cICgJy
- TLSH T12EF57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10