Overview

overview

10

Static

static

10

12dd96d339...db.exe

windows10-2004-x64

1

12dd96d339...db.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    12dd96d339c2efb20e8e6016d7ad8eb8a02a0944bd3d4e8af01c8368dbc465db.bin
  • Size 5.6MB
  • Sample260907-dtyzjawsay
  • SHA256 12dd96d339c2efb20e8e6016d7ad8eb8a02a0944bd3d4e8af01c8368dbc465db
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
meshagentjwalkeritservicesbackdoorrattrojan

Malware Config

Extracted

Family

  • meshagent

Version

  • 2

Botnet

  • jwalkeritservices

C2

  • http://awsvoucher.com:443/agent.ashx

Attributes
  • mesh_id

    0xFCF32C760301EFB12F66CE95F0FC76CFA1103471E9ABF7E5E8629FE3FE34AA7A4ADBC394F1C1E8D89C59743CAA4D6588

  • server_id

    460435B76E2BA7A386C796547EE9B205E12F241B5E68453D37FB6DC55D7215361C5860C69962327ED15D48ACFF0C8280

  • wss

    wss://awsvoucher.com:443/agent.ashx

Targets

    • Target
      12dd96d339c2efb20e8e6016d7ad8eb8a02a0944bd3d4e8af01c8368dbc465db.bin
    • Size 5.6MB
    • SHA256 12dd96d339c2efb20e8e6016d7ad8eb8a02a0944bd3d4e8af01c8368dbc465db
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks