General
- Target e61573d5f204d5ca114bbaa798d366ddbdc055d4f4250046d2330412236295e2.bin
- Size 3.3MB
- Sample260904-29wfcascnc
- SHA256 e61573d5f204d5ca114bbaa798d366ddbdc055d4f4250046d2330412236295e2
- MD5 67ed4e27535f27a17786ab87b06086cb
- SHA1 e21e0031cd330804f1d2958c348c7c2962a1005f
- SHA512 165e2000e499ff74733e3c5596f2430a4ec40f6016ae1b3e79bb60d8a4e544156cb17a7956c47341b3e3447f05f7babac0c28570754291c402d4491ee6c44616
- SSDEEP 49152:EMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5frC:xd9AddBcryO3cICgI9+
- TLSH T18AF57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
e61573d5f204d5ca114bbaa798d366ddbdc055d4f4250046d2330412236295e2.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
e61573d5f204d5ca114bbaa798d366ddbdc055d4f4250046d2330412236295e2.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
TacticalRMM
C2
-
http://mesh.rustbelt.tech:443/agent.ashx
Attributes
-
mesh_id
0x1CBF3DBD5EF85A2AD58442E3A4D4604098A351D93406993BAB6819A68A1936C008859F8D162245AF95D548D9BAC27B6B
-
server_id
7F35E15861F4B59B56E104419E91AA3C6963BD9430F5EE26770FD3EFE729EBDD804ABE36F5952EF20B9E3ECA20092B89
-
wss
wss://mesh.rustbelt.tech:443/agent.ashx
Targets
-
- Target e61573d5f204d5ca114bbaa798d366ddbdc055d4f4250046d2330412236295e2.bin
- Size 3.3MB
- SHA256 e61573d5f204d5ca114bbaa798d366ddbdc055d4f4250046d2330412236295e2
- MD5 67ed4e27535f27a17786ab87b06086cb
- SHA1 e21e0031cd330804f1d2958c348c7c2962a1005f
- SHA512 165e2000e499ff74733e3c5596f2430a4ec40f6016ae1b3e79bb60d8a4e544156cb17a7956c47341b3e3447f05f7babac0c28570754291c402d4491ee6c44616
- SSDEEP 49152:EMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5frC:xd9AddBcryO3cICgI9+
- TLSH T18AF57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10