Overview

overview

10

Static

static

10

2024-09-30...er.exe

windows7-x64

1

2024-09-30...er.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-09-30_0ba599cf2709f7490e85d36990059063_ryuk_sliver

  • Size

    3.3MB

  • Sample

    240930-ey8j7ssekb

  • MD5

    0ba599cf2709f7490e85d36990059063

  • SHA1

    a23ce8355fecb1d8b42eaec54f7b9b8a381b0064

  • SHA256

    1a69b2fcd67c34531b993910810c1b91752f6870e25b9870c15cd9d27b2d8e16

  • SHA512

    e40c93254fe0e147a5185186b3038f302796b2df093c076ecad837449f6b82857a05fcce61e954d80c89b45ebef45bc87120bf0f254e129bc82d00ba769a44d4

  • SSDEEP

    49152:Mf708gNcR9l5NyQB7q1AlgraPgDLDVXI2RXgGfX2kMFvfAw6dZ7Nueuxg5Ak:M+49lnyeG3D56gXm6Hqk

Score
10/10
meshagentмакет-рф 72691157ul

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

Макет-РФ 72691157UL

C2

http://meshcent.its.ufanet.ru:443/agent.ashx

Attributes
  • mesh_id

    0x50A3C35BE701633EF5E3A3FDCC988C70023B461880562BAE11750AB8B1448E1C1A94A103130C0C429A98B832DA1756E0

  • server_id

    92361DD62E17552490F9968C444EAF21618626EC916098B7A27028E3759BECFC00603247A5829F7E5F230D03F82213BF

  • wss

    wss://meshcent.its.ufanet.ru:443/agent.ashx

Targets

    • Target

      2024-09-30_0ba599cf2709f7490e85d36990059063_ryuk_sliver

    • Size

      3.3MB

    • MD5

      0ba599cf2709f7490e85d36990059063

    • SHA1

      a23ce8355fecb1d8b42eaec54f7b9b8a381b0064

    • SHA256

      1a69b2fcd67c34531b993910810c1b91752f6870e25b9870c15cd9d27b2d8e16

    • SHA512

      e40c93254fe0e147a5185186b3038f302796b2df093c076ecad837449f6b82857a05fcce61e954d80c89b45ebef45bc87120bf0f254e129bc82d00ba769a44d4

    • SSDEEP

      49152:Mf708gNcR9l5NyQB7q1AlgraPgDLDVXI2RXgGfX2kMFvfAw6dZ7Nueuxg5Ak:M+49lnyeG3D56gXm6Hqk

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks