Overview

overview

10

Static

static

10

c1e99978bc...ff.exe

windows10-2004-x64

1

c1e99978bc...ff.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    c1e99978bca9b61cd9b7823042cb21dcce29ec77c5e3fb96142e9f4785aff3ff.bin
  • Size 3.3MB
  • Sample260916-xzpgtsda78
  • SHA256 c1e99978bca9b61cd9b7823042cb21dcce29ec77c5e3fb96142e9f4785aff3ff
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
meshagenttacticalrmmbackdoorrattrojan

Malware Config

Extracted

Family

  • meshagent

Version

  • 2

Botnet

  • TacticalRMM

C2

  • http://mesh.internetfastpeople.com:443/agent.ashx

Attributes
  • mesh_id

    0xCBB1678746649CEC5C28FD5F8EEA360B6672952DC01754CC330EA9D1DBAEB2D27D6D0232A13590D79E080627D1D04CD8

  • server_id

    95028EC4024D2965154F0C89CAD24955C2E5B039DF4AD7269B46F72EFF58AA0BF280545AFD74612F0EDBC08118FAAC05

  • wss

    wss://mesh.internetfastpeople.com:443/agent.ashx

Targets

    • Target
      c1e99978bca9b61cd9b7823042cb21dcce29ec77c5e3fb96142e9f4785aff3ff.bin
    • Size 3.3MB
    • SHA256 c1e99978bca9b61cd9b7823042cb21dcce29ec77c5e3fb96142e9f4785aff3ff
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks