Overview

overview

10

Static

static

10

2024-10-02...er.exe

windows7-x64

1

2024-10-02...er.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-10-02_f777afd24bcfda9d3908e311f2c133ed_ryuk_sliver

  • Size

    3.3MB

  • Sample

    241002-stl3asxcka

  • MD5

    f777afd24bcfda9d3908e311f2c133ed

  • SHA1

    b5cd56551375a2d747e897372f74134db3758303

  • SHA256

    82d6ffab386dcfad2fbe3916a0bf54e718afeffef27cf1e04e648dbe31fb67aa

  • SHA512

    e66e9a3b624f78d3fed718e0037f2ee242e6537e3082cc468646ae20c39b436901a8b45d5337df0f88367d67ce89bcb1f4788db2cd6517ea485174dda906519e

  • SSDEEP

    49152:rX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QF:rlRsZ47/QXoHUOfAoj1x6F

Score
10/10
meshagenttacticalrmm

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

TacticalRMM

C2

http://mesh.newtactical.buzz:443/agent.ashx

Attributes
  • mesh_id

    0x61F838E2BDB0206A28E8B739C4D0CBC09D03B9F8508EFE3AF6381158E85728B8D60ABA4A890F9549E6527B82116A9B7A

  • server_id

    5A55378C835582193041D26955989D0A8F3584725191A5CFBCDE0D443422A896C8A489D38A395351A40226E40FB695C6

  • wss

    wss://mesh.newtactical.buzz:443/agent.ashx

Targets

    • Target

      2024-10-02_f777afd24bcfda9d3908e311f2c133ed_ryuk_sliver

    • Size

      3.3MB

    • MD5

      f777afd24bcfda9d3908e311f2c133ed

    • SHA1

      b5cd56551375a2d747e897372f74134db3758303

    • SHA256

      82d6ffab386dcfad2fbe3916a0bf54e718afeffef27cf1e04e648dbe31fb67aa

    • SHA512

      e66e9a3b624f78d3fed718e0037f2ee242e6537e3082cc468646ae20c39b436901a8b45d5337df0f88367d67ce89bcb1f4788db2cd6517ea485174dda906519e

    • SSDEEP

      49152:rX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QF:rlRsZ47/QXoHUOfAoj1x6F

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks