meshagent | hxxp://download[.]tender-confirmation[.]com[:]8080/file/ | Triage™

Login
Reports

Overview

overview

Static

static

1

URLScan

urlscan

1

http://download.tend...

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
http://download.tender-confirmation.com:8080/file/
Sample261002-m6crhayakd

Score

10^/10

meshagent admin2 backdoor discovery execution persistence ransomware rat trojan

Static task

static1

URLScan task

urlscan1

Behavioral task

behavioral1

Sample

http://download.tender-confirmation.com:8080/file/

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

16 signatures

300 seconds

backdoor admin2 discovery execution meshagent persistence ransomware rat trojan

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

Admin2

C2

http://23.94.252.217:4430/agent.ashx

Attributes

mesh_id
0x5FAA9E634C79411B0813AE4123F83FC377B9BDCBF75F2C9864F2BF7843B019786E5B4DC089089648280335BF114AC1B4
server_id
53E34DB535077FCE4CD096DC00489861A0809B46ECA0A9086FA32ABA543F2CF62AA0ECF9DB54F9B4FB46474EE6B8657B
wss
wss://23.94.252.217:4430/agent.ashx

Targets

- Target
  http://download.tender-confirmation.com:8080/file/
Score

10^/10

backdoor admin2 discovery execution meshagent persistence ransomware rat trojan
- Detects MeshAgent payload
- Family: MeshAgent
  MeshAgent is an open source remote access trojan written in C++.
  rat trojan backdoor meshagent
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

urlscan1

behavioral1

backdooradmin2discoveryexecutionmeshagentpersistenceransomwarerattrojan

© 2018-2026

Terms | Privacy