General

  • Target
    2024-10-09_29aee011b0924b18c5fa94b36f02332b_ryuk_sliver
  • Size 3.3MB
  • Sample241009-hadayasfnc
  • SHA256 55f7346855b197a2315ad53cb77f8605a79ef1218ecae4513ef8249f529113aa
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • meshagent

Version
  • 2

Botnet
  • Personal Computers

C2
  • http://mesh.elahd.com:4434/agent.ashx

Attributes
  • mesh_id

    0x8D847097D0BFECD092CD2008158C1C513FC4CEBCEC5B9B1F405A2B200C53DA6D18C2B52532FB944920AF81C3D2C3188C

  • server_id

    815B8F45656B8C1109812A4D6EA7FFA07B46AA498CBDAAFB5202F96B78EFDA6AADFF690ABE5B6AD26169F868A8AA1F5F

  • wss

    wss://mesh.elahd.com:4434/agent.ashx

Targets

    • Target
      2024-10-09_29aee011b0924b18c5fa94b36f02332b_ryuk_sliver
    • Size 3.3MB
    • SHA256 55f7346855b197a2315ad53cb77f8605a79ef1218ecae4513ef8249f529113aa
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10

MITRE ATT&CK Matrix

Tasks