Overview

overview

10

Static

static

10

af9k2_drv64.exe

windows10-2004-x64

1

af9k2_drv64.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    af9k2_drv64.bin
  • Size 3.3MB
  • Sample260916-sql8wszzbx
  • SHA256 aaf2b275b26cb6684c980d9e88c2d91d7b80c49d3c7d3707c5d1d550e15babef
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
meshagenthostsbackdoorrattrojan

Malware Config

Extracted

Family

  • meshagent

Version

  • 2

Botnet

  • hosts

C2

  • http://37.114.41.131:4490/agent.ashx

Attributes
  • mesh_id

    0x7E1A4BD15A55FDE4FA44DBA4B46380EAEAEFBC253C7BEC83A2D4F1E1F7BB3D040CD5343B7309E25DB29379FF8C6559C9

  • server_id

    7AFB69147C4A8B87AFEB06F186725E6C311EFB745675B1BB917D5E6F1A666ABA71D33A825D21BB6B097ADD0A7D7A6FB4

  • wss

    wss://37.114.41.131:4490/agent.ashx

Targets

    • Target
      af9k2_drv64.bin
    • Size 3.3MB
    • SHA256 aaf2b275b26cb6684c980d9e88c2d91d7b80c49d3c7d3707c5d1d550e15babef
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks