General

  • Target

    2024-09-30_44b1ff26bb06d3c9ea147cd67ef99198_ryuk_sliver

  • Size

    3.5MB

  • Sample

    240930-hdchta1ajq

  • MD5

    44b1ff26bb06d3c9ea147cd67ef99198

  • SHA1

    732d61bc67e068102e88c579771f9e01b82f841d

  • SHA256

    32445c7b6f5327193e2b581def5db0870ea7a97ac0b6406877a261c2c8258b7e

  • SHA512

    fc9fe934588b024e11f58fafe394ee681b781da0c4c02cc2d51fa30cc7d8348e1f8eefd112b847e7ad3cc4af42f172df8a03b096dbb621abbc48a65a3196f564

  • SSDEEP

    49152:CX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQek5OCK:ClRsZ47/QXoHUOfAoj19UCK

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

Assistência Esporádica

C2

http://lms-i.myvnc.com:443/agent.ashx

Attributes
  • mesh_id

    0x5803CBE923043322CF064B57F5D4002C82175E69189777F85044D7DC0BF3BFD984F5EC1D0C226F109439BD87DD0D1944

  • server_id

    8BA9B6AA53A9B397C53D2A2AC38D68D14D00202AB4AC0CE41882AB1382E6D25B5886A4EDBC78559A28046FA7EEE849DD

  • wss

    wss://lms-i.myvnc.com:443/agent.ashx

Targets

    • Target

      2024-09-30_44b1ff26bb06d3c9ea147cd67ef99198_ryuk_sliver

    • Size

      3.5MB

    • MD5

      44b1ff26bb06d3c9ea147cd67ef99198

    • SHA1

      732d61bc67e068102e88c579771f9e01b82f841d

    • SHA256

      32445c7b6f5327193e2b581def5db0870ea7a97ac0b6406877a261c2c8258b7e

    • SHA512

      fc9fe934588b024e11f58fafe394ee681b781da0c4c02cc2d51fa30cc7d8348e1f8eefd112b847e7ad3cc4af42f172df8a03b096dbb621abbc48a65a3196f564

    • SSDEEP

      49152:CX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQek5OCK:ClRsZ47/QXoHUOfAoj19UCK

    Score
    1/10

MITRE ATT&CK Matrix

Tasks