General
- Target 2024-09-24_c81010429048ad4e599a7c7d7b4c989e_ryuk_sliver
- Size 3.2MB
- Sample240924-b3axyssbrk
- SHA256 9061db215c03159b56ff440427c8c522ad63ed1d7b605814c912699f4833907e
- MD5 c81010429048ad4e599a7c7d7b4c989e
- SHA1 93945da87e0ec94c3efb7e42c13c0b0cc6c0f1af
- SHA512 d86126c20e0cdd6ed696d908d7f172ba1b30611c97f9835a6519f061d7e82ac12795527cfcb7930287bf5ab6cf763e3d21ed2b1a5b05a3dea501a6749206e26b
- SSDEEP 49152:yX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe0:ylRsZ47/QXoHUOfAoj13
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
2024-09-24_c81010429048ad4e599a7c7d7b4c989e_ryuk_sliver.exe
Resource
win7-20240903-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-09-24_c81010429048ad4e599a7c7d7b4c989e_ryuk_sliver.exe
Resource
win10v2004-20240802-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
test
C2
-
http://172.235.29.101:443/agent.ashx
Attributes
-
mesh_id
0x3EE5903769416C4684EED553B8592F1262725F3760B9D434580EC5996C58C7FA047E55451EFCECB5E05C47671A1D49DC
-
server_id
6819A5BAB0A0BCCE13E3D9539465844D9928C4CE6EEC6B4369F61F6C1443F5869F8D4F45B5B63C7DA8A713E5A4DE274D
-
wss
wss://172.235.29.101:443/agent.ashx
Targets
-
- Target 2024-09-24_c81010429048ad4e599a7c7d7b4c989e_ryuk_sliver
- Size 3.2MB
- SHA256 9061db215c03159b56ff440427c8c522ad63ed1d7b605814c912699f4833907e
- MD5 c81010429048ad4e599a7c7d7b4c989e
- SHA1 93945da87e0ec94c3efb7e42c13c0b0cc6c0f1af
- SHA512 d86126c20e0cdd6ed696d908d7f172ba1b30611c97f9835a6519f061d7e82ac12795527cfcb7930287bf5ab6cf763e3d21ed2b1a5b05a3dea501a6749206e26b
- SSDEEP 49152:yX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe0:ylRsZ47/QXoHUOfAoj13
- MD5 SHA1 SHA512 SSDEEP
Score1/10