General
- Target 845c91adae8c4f09e9f6dc0b79f621c18c45e13cb27f363cba2422a27db6a188.bin
- Size 3.3MB
- Sample260827-h4dhss1bme
- SHA256 845c91adae8c4f09e9f6dc0b79f621c18c45e13cb27f363cba2422a27db6a188
- MD5 6b92b539e4bb0559177bba09b29e38c3
- SHA1 69a5fc9c91aa8aa7b7de7941b0546aa1aa0ee5f0
- SHA512 bd1da850b4a0c655549c6d574de3ef7011ce34b954ea88d23fdba12ffcfa6c192b62cc5b409ce776ad8b1a905aaced37991ff54cb7802ed8b94da0bc69500a7a
- SSDEEP 49152:6MSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fm:Ld9AddBcryO3cICgI9m
- TLSH T1DFF57CD2A7A600E8E977F23CC5568517E7F2B81713709BCF25A44A660F236D12B3E742
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
845c91adae8c4f09e9f6dc0b79f621c18c45e13cb27f363cba2422a27db6a188.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
845c91adae8c4f09e9f6dc0b79f621c18c45e13cb27f363cba2422a27db6a188.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
s
C2
-
http://169.58.57.164:443/agent.ashx
Attributes
-
mesh_id
0xFA32A961CB24083FC8A20E735E01686B85B50631AB1CE3FB323836E7003CAD94A97597D57A79019896B725FBAB0DB782
-
server_id
CEAF7449D4978D2B09E22B8E442B3D986300A1D289A74D38236CE72557CA45F690E357889D00E6819BEAAB5173376CEB
-
wss
wss://169.58.57.164:443/agent.ashx
Targets
-
- Target 845c91adae8c4f09e9f6dc0b79f621c18c45e13cb27f363cba2422a27db6a188.bin
- Size 3.3MB
- SHA256 845c91adae8c4f09e9f6dc0b79f621c18c45e13cb27f363cba2422a27db6a188
- MD5 6b92b539e4bb0559177bba09b29e38c3
- SHA1 69a5fc9c91aa8aa7b7de7941b0546aa1aa0ee5f0
- SHA512 bd1da850b4a0c655549c6d574de3ef7011ce34b954ea88d23fdba12ffcfa6c192b62cc5b409ce776ad8b1a905aaced37991ff54cb7802ed8b94da0bc69500a7a
- SSDEEP 49152:6MSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fm:Ld9AddBcryO3cICgI9m
- TLSH T1DFF57CD2A7A600E8E977F23CC5568517E7F2B81713709BCF25A44A660F236D12B3E742
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10