General

  • Target

    2024-10-19_517f06ca20c385adacdcc4a2937ec1ec_ryuk_sliver

  • Size

    3.3MB

  • Sample

    241019-3k9r4sxgmr

  • MD5

    517f06ca20c385adacdcc4a2937ec1ec

  • SHA1

    8afc4cd3b47bd57877c3c3e68c40ea71f7790a56

  • SHA256

    041c8e5c43b9a430a4abfd8e4f97d52384adf1efc258b5723fb873a3e4fec780

  • SHA512

    c02a6f72894af3fe55399a823525995d676547f00d7e75e34266404efad467b66e9cb22cdaf33f66bafee4e82a83c9dacdc2d065574481173fda0455beef5632

  • SSDEEP

    49152:Yf708gNcR9l5NyQB7q1AlgraPgDLDVXI2RXgGfX2kMFvfAw6dZ7Nueuxg5AR:Y+49lnyeG3D56gXm6HqR

Score
10/10

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

22-2

C2

http://control3.colizeumarena.ru:443/agent.ashx

Attributes
  • mesh_id

    0xB10770EDFD051B88DF83A6DEF8922250E6070203BD296FC8E5D6AF0B8C9343F1EA147040DA1F2B04F110005BB526F098

  • server_id

    C1139252AFB8BB79497F4C3FFFE817B4721FC57DF5DB25C1AFDFE4C5780D3D815802672B52644A626A44410DFFDE7D27

  • wss

    wss://control3.colizeumarena.ru:443/agent.ashx

Targets

    • Target

      2024-10-19_517f06ca20c385adacdcc4a2937ec1ec_ryuk_sliver

    • Size

      3.3MB

    • MD5

      517f06ca20c385adacdcc4a2937ec1ec

    • SHA1

      8afc4cd3b47bd57877c3c3e68c40ea71f7790a56

    • SHA256

      041c8e5c43b9a430a4abfd8e4f97d52384adf1efc258b5723fb873a3e4fec780

    • SHA512

      c02a6f72894af3fe55399a823525995d676547f00d7e75e34266404efad467b66e9cb22cdaf33f66bafee4e82a83c9dacdc2d065574481173fda0455beef5632

    • SSDEEP

      49152:Yf708gNcR9l5NyQB7q1AlgraPgDLDVXI2RXgGfX2kMFvfAw6dZ7Nueuxg5AR:Y+49lnyeG3D56gXm6HqR

    Score
    1/10

MITRE ATT&CK Matrix

Tasks