General

  • Target

    2024-10-12_d63d1f77d0bbaacb826330b6c7ec87b2_ryuk_sliver

  • Size

    3.3MB

  • MD5

    d63d1f77d0bbaacb826330b6c7ec87b2

  • SHA1

    2127974e685725237ae5e3ca5a720e529f893a1b

  • SHA256

    8993d212be2993fb5742fe3f253e002e41ecd40a736ffb483fe3e2cccf5dbcb6

  • SHA512

    44be62bd8d424ca76a958bc574aa8a77517e351dd7ad0a5475d57e24ea5dac8a67f68bbc49201f790ba6a8965ff9e628245557e218c1c0defc8565cd83b8e797

  • SSDEEP

    49152:SX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Q1:SlRsZ47/QXoHUOfAoj1x61

Score
10/10

Malware Config

Signatures

  • Detects MeshAgent payload 1 IoCs
  • Meshagent family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-10-12_d63d1f77d0bbaacb826330b6c7ec87b2_ryuk_sliver
    .exe windows:6 windows x64 arch:x64

    fb0a8b4a81655f744a37af985e009476


    Headers

    Imports

    Sections