Overview

overview

10

Static

static

10

meshagent3...ss.exe

windows10-2004-x64

3

meshagent3...ss.exe

windows11-21h2-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    meshagent32-Access.exe
  • Size 3.7MB
  • Sample260303-lllcgaby4e
  • SHA256 6545b109e575cc3a60d80e7155a4a5f70d770adbe96965cb7e42a2d62ca83043
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
meshagentaccessdiscovery

Malware Config

Extracted

Family

  • meshagent

Version

  • 2

Botnet

  • Access

C2

  • http://az.lsa.az:444/agent.ashx

Attributes
  • mesh_id

    0xB551D33F9968B8F334AE69A015C933B1A9F79868B74E7A1A63CF71B06D8150C48FD381FC3B5797AE231736FF80B3E47A

  • server_id

    A99A9C7B7E30B89F71E9BA5CCFAEC2456BB64A64A35F4780F205ABAD0014AEE6B883CF6316F998EBC54A98188853AD02

  • wss

    wss://az.lsa.az:444/agent.ashx

Targets

    • Target
      meshagent32-Access.exe
    • Size 3.7MB
    • SHA256 6545b109e575cc3a60d80e7155a4a5f70d770adbe96965cb7e42a2d62ca83043
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks