General
- Target 02fca53d0adb73b11d7b4586531bf7e8def84f9653414417596d823dbc1534b4.bin
- Size 3.3MB
- Sample260903-29tlraxgpc
- SHA256 02fca53d0adb73b11d7b4586531bf7e8def84f9653414417596d823dbc1534b4
- MD5 7ffcf6cef9c62e0828eddc01d6a9f6b4
- SHA1 2b55d35d862281cc5880f37ded99820cbfe12f0b
- SHA512 56fb8aae866dc1cc43e9aa54d0b9b428b0c8fbc13ae6b8f99fa1e0e14d685b90e4e20449590133fb12f8aec5a3565aff6fd28e70fc8b31bb74e3962fc8ea6ce7
- SSDEEP 49152:iMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fl:Dd9AddBcryO3cICgI9l
- TLSH T194F57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
02fca53d0adb73b11d7b4586531bf7e8def84f9653414417596d823dbc1534b4.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
02fca53d0adb73b11d7b4586531bf7e8def84f9653414417596d823dbc1534b4.exe
Resource
win11ltsc2024-20260710-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
TacticalRMM
C2
-
http://mesh.cloudconnects.top:443/agent.ashx
Attributes
-
mesh_id
0x0DE4D46D74CCB03D5E10303FBBAE187B04C41983370F11B3E5FE0A08C7B4ECD116E479C25352C036A97C77BE81B79985
-
server_id
62C2C121396DBB9C08432F4A566D5D07A81CCC7C76F53F77421D6E0DAFB497E2CF076D7E051CBBF7454C230E9B8D37C2
-
wss
wss://mesh.cloudconnects.top:443/agent.ashx
Targets
-
- Target 02fca53d0adb73b11d7b4586531bf7e8def84f9653414417596d823dbc1534b4.bin
- Size 3.3MB
- SHA256 02fca53d0adb73b11d7b4586531bf7e8def84f9653414417596d823dbc1534b4
- MD5 7ffcf6cef9c62e0828eddc01d6a9f6b4
- SHA1 2b55d35d862281cc5880f37ded99820cbfe12f0b
- SHA512 56fb8aae866dc1cc43e9aa54d0b9b428b0c8fbc13ae6b8f99fa1e0e14d685b90e4e20449590133fb12f8aec5a3565aff6fd28e70fc8b31bb74e3962fc8ea6ce7
- SSDEEP 49152:iMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fl:Dd9AddBcryO3cICgI9l
- TLSH T194F57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10