Overview

overview

10

Static

static

10

2024-09-25...er.exe

windows7-x64

1

2024-09-25...er.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    2024-09-25_3d1568c0498f3b81014a613519452fda_ryuk_sliver
  • Size 3.3MB
  • Sample240925-pm2mmaycpg
  • SHA256 a9faecf853fcdc98c9a813c0844b3e6b7121fc6615a2e6dffba418158526ba77
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
meshagenttacticalrmm

Malware Config

Extracted

Family

  • meshagent

Version

  • 2

Botnet

  • TacticalRMM

C2

  • http://mesh.grupohtop.com:443/agent.ashx

Attributes
  • mesh_id

    0xEF8F588A19FD402F5ADEAA77004521B32E108C98802D4751A0B82DB2876301121D3FF5CE0748C7937F694B93B40C3F57

  • server_id

    1AF3CBAB7F1CD0A4B00B3A76965585225EDAC9716417FADF89FCAFF0D502FBD97705B0B3C918D96095301943DAD17296

  • wss

    wss://mesh.grupohtop.com:443/agent.ashx

Targets

    • Target
      2024-09-25_3d1568c0498f3b81014a613519452fda_ryuk_sliver
    • Size 3.3MB
    • SHA256 a9faecf853fcdc98c9a813c0844b3e6b7121fc6615a2e6dffba418158526ba77
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks