General

  • Target
    2024-10-07_38d91a4930a59eab50c252452b636380_ryuk_sliver
  • Size 3.2MB
  • Sample241007-1986rszdpc
  • SHA256 1d47d11dc976beb251c9650e524ddbebcb05cd00fdd1b577b6d714c13fd5370c
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • meshagent

Version
  • 2

Botnet
  • Uceda School - Eastern

C2
  • http://remote.opennology.com:443/agent.ashx

Attributes
  • mesh_id

    0x90E2DE221F7B3845544A9C06ADF516B97090FF8BC58BA0AB1B645332B682F094AD68D97F32BDC1025EB5284F3F06A3B4

  • server_id

    CEA0C3AF6448380189838E51FE29C7BDFDCC5A7E86351147799A84708BCD06B563FA9701A30D129D9BAAE972A73B5591

  • wss

    wss://remote.opennology.com:443/agent.ashx

Targets

    • Target
      2024-10-07_38d91a4930a59eab50c252452b636380_ryuk_sliver
    • Size 3.2MB
    • SHA256 1d47d11dc976beb251c9650e524ddbebcb05cd00fdd1b577b6d714c13fd5370c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10

MITRE ATT&CK Matrix

Tasks