General
-
Target
2024-10-10_e98fb98ccf94c2dce709a37ec0a17c33_ryuk_sliver
-
Size
3.3MB
-
Sample
241010-br8d3sygjj
-
MD5
e98fb98ccf94c2dce709a37ec0a17c33
-
SHA1
b271b1388df7c3a823721903dc01e7e722c1b1d0
-
SHA256
7d7eb627c23db20960b31db38d0ff2d8dbaeafa49936a85082442f785cb1d805
-
SHA512
28ae2e6fda9e8a8fa02e013f7f79926bc64d56c0832762084675bc45df0cee27588c02453fa46d1025e09fcda59a164d7f88b759b5a9356025b1c484362b5fdb
-
SSDEEP
49152:uX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qlm:ulRsZ47/QXoHUOfAoj1x6lm
Behavioral task
behavioral1
Sample
2024-10-10_e98fb98ccf94c2dce709a37ec0a17c33_ryuk_sliver.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-10_e98fb98ccf94c2dce709a37ec0a17c33_ryuk_sliver.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
meshagent
2
TacticalRMM
http://mesh.pub.com.ki:443/agent.ashx
-
mesh_id
0x7C3E72DD9BE092BD0457A3CC31C200D00652794B127FC5C35BFD043B916FD270B382B61B462B9DE07B5610DF17CE44EE
-
server_id
ED02AA09549947E05B8DFD4C15362D1EBEA51ED2A552C4D82AAF438B409CD7FEA16BA031EB4D93B0CC81A362DB8A03B2
-
wss
wss://mesh.pub.com.ki:443/agent.ashx
Targets
-
-
Target
2024-10-10_e98fb98ccf94c2dce709a37ec0a17c33_ryuk_sliver
-
Size
3.3MB
-
MD5
e98fb98ccf94c2dce709a37ec0a17c33
-
SHA1
b271b1388df7c3a823721903dc01e7e722c1b1d0
-
SHA256
7d7eb627c23db20960b31db38d0ff2d8dbaeafa49936a85082442f785cb1d805
-
SHA512
28ae2e6fda9e8a8fa02e013f7f79926bc64d56c0832762084675bc45df0cee27588c02453fa46d1025e09fcda59a164d7f88b759b5a9356025b1c484362b5fdb
-
SSDEEP
49152:uX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qlm:ulRsZ47/QXoHUOfAoj1x6lm
Score1/10 -