Overview

overview

10

Static

static

10

663692f050...57.exe

windows10-2004-x64

1

663692f050...57.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    663692f0502786a59fd4d30bc0d552cc9dffadb008ff1c5079191eb2ffdb2f57.exe
  • Size 3.2MB
  • Sample260913-jwvyjsgh62
  • SHA256 663692f0502786a59fd4d30bc0d552cc9dffadb008ff1c5079191eb2ffdb2f57
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
meshagentborkabackdoorrattrojan

Malware Config

Extracted

Family

  • meshagent

Version

  • 2

Botnet

  • Borka

C2

  • http://microsoft.ns1.name:6443/agent.ashx

Attributes
  • mesh_id

    0xC881DE50A581B57610B4ECBC6DFE583313A15FDDA8F53CDADAAD47A9A01793042E4830DFD96237C6B61612AF0D1B8DDD

  • server_id

    6F1BBBEF6D9578D0BF6A05FF7B591A2735E5064AA05AE1ADDBCF7FB79A605ADC11E782B60F9E948491C1A70AB13C645B

  • wss

    wss://microsoft.ns1.name:6443/agent.ashx

Targets

    • Target
      663692f0502786a59fd4d30bc0d552cc9dffadb008ff1c5079191eb2ffdb2f57.exe
    • Size 3.2MB
    • SHA256 663692f0502786a59fd4d30bc0d552cc9dffadb008ff1c5079191eb2ffdb2f57
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks