General

  • Target
    0d158954a5414fa2b55659212b4ebbbe69136bc5ed1b4c5c4f255af8b74df3c0.bin
  • Size 3.3MB
  • Sample260909-sqd8aaxdld
  • SHA256 0d158954a5414fa2b55659212b4ebbbe69136bc5ed1b4c5c4f255af8b74df3c0
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • meshagent

Version
  • 2

Botnet
  • MARS | GERALD

C2
  • http://mesh.zoorroo.icu:443/agent.ashx

Attributes
  • mesh_id

    0xE895EAA779952F2CCCCBF8724E8508B422E4D8ED1A4801D124C3795220BBD2EE91A515037BFA2EBC23674BC7AEC2A943

  • server_id

    D5E5A0BBF0C8F459722B46ADA23381CB1895D7541DCA57B0B08C0A3E72A4413F18FB53896BE77CB084EFD4D2615680F5

  • wss

    wss://mesh.zoorroo.icu:443/agent.ashx

Targets

    • Target
      0d158954a5414fa2b55659212b4ebbbe69136bc5ed1b4c5c4f255af8b74df3c0.bin
    • Size 3.3MB
    • SHA256 0d158954a5414fa2b55659212b4ebbbe69136bc5ed1b4c5c4f255af8b74df3c0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Matrix

Tasks