General
- Target 0d158954a5414fa2b55659212b4ebbbe69136bc5ed1b4c5c4f255af8b74df3c0.bin
- Size 3.3MB
- Sample260909-sqd8aaxdld
- SHA256 0d158954a5414fa2b55659212b4ebbbe69136bc5ed1b4c5c4f255af8b74df3c0
- MD5 9483eb0682bcdb1dfcb9ce7cbd61811e
- SHA1 8b85bebaca8350d30270a90185e2c2551dcc2823
- SHA512 f1f96908435d4d6bb5c34f9d4c8eca624d8c2469ccf43a775a8dcd8aca745529b77b3197ec15c824268aee6c4a3000c66954b91a9c6598c62ec6d6ce9e563be1
- SSDEEP 49152:VMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fR:ed9AddBcryO3cICgI9R
- TLSH T15DF57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
0d158954a5414fa2b55659212b4ebbbe69136bc5ed1b4c5c4f255af8b74df3c0.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
0d158954a5414fa2b55659212b4ebbbe69136bc5ed1b4c5c4f255af8b74df3c0.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
MARS | GERALD
C2
-
http://mesh.zoorroo.icu:443/agent.ashx
Attributes
-
mesh_id
0xE895EAA779952F2CCCCBF8724E8508B422E4D8ED1A4801D124C3795220BBD2EE91A515037BFA2EBC23674BC7AEC2A943
-
server_id
D5E5A0BBF0C8F459722B46ADA23381CB1895D7541DCA57B0B08C0A3E72A4413F18FB53896BE77CB084EFD4D2615680F5
-
wss
wss://mesh.zoorroo.icu:443/agent.ashx
Targets
-
- Target 0d158954a5414fa2b55659212b4ebbbe69136bc5ed1b4c5c4f255af8b74df3c0.bin
- Size 3.3MB
- SHA256 0d158954a5414fa2b55659212b4ebbbe69136bc5ed1b4c5c4f255af8b74df3c0
- MD5 9483eb0682bcdb1dfcb9ce7cbd61811e
- SHA1 8b85bebaca8350d30270a90185e2c2551dcc2823
- SHA512 f1f96908435d4d6bb5c34f9d4c8eca624d8c2469ccf43a775a8dcd8aca745529b77b3197ec15c824268aee6c4a3000c66954b91a9c6598c62ec6d6ce9e563be1
- SSDEEP 49152:VMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fR:ed9AddBcryO3cICgI9R
- TLSH T15DF57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10