Overview

overview

10

Static

static

10

2024-09-27...er.exe

windows7-x64

1

2024-09-27...er.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    2024-09-27_044f477788212a7b88345cedf2354080_ryuk_sliver
  • Size 3.2MB
  • Sample240927-mtpwasydmk
  • SHA256 edb39015b057b45b83fb704a72f3823a5e7d5de59d0f1dc6b9133ff257f9e752
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
meshagentcerti

Malware Config

Extracted

Family

  • meshagent

Version

  • 2

Botnet

  • Certi

C2

  • http://172.236.171.111:443/agent.ashx

Attributes
  • mesh_id

    0x83DC2E03D3CC69E1F6BA635EE1B9729C85F530972CCE5362B05C9C6EF1A38161338F7C40849549AD8184A4CA16AC400A

  • server_id

    38951BE7A38EAAF4355BAD9DA1059869CD03DC09305D5390D5EA7690C5348D9053A709A8831ECFA95D43AD779793E7D3

  • wss

    wss://172.236.171.111:443/agent.ashx

Targets

    • Target
      2024-09-27_044f477788212a7b88345cedf2354080_ryuk_sliver
    • Size 3.2MB
    • SHA256 edb39015b057b45b83fb704a72f3823a5e7d5de59d0f1dc6b9133ff257f9e752
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks