Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-10-19...er.exe

windows7-x64

1

2024-10-19...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-19_f2d10d991eccb5239734147f4788025c_ryuk_sliver

  • Size

    3.3MB

  • Sample

    241019-3t9hpswflh

  • MD5

    f2d10d991eccb5239734147f4788025c

  • SHA1

    c4c9b6fb3eb15b812a6111caf312c8866644f7cc

  • SHA256

    cda0f8d114318e90726736160df44e8c51cf129a7b250e4322453d574303171c

  • SHA512

    f8ff8998f6b1a7cdeb26d93d299891efb4e5b71100d8e6b85d4f15d9cd79d92d0f694ee27e2d2e88b84e43636fa4a17ee306c1a2780df1510556c21d15e3c42b

  • SSDEEP

    49152:0f708gNcR9l5NyQB7q1AlgraPgDLDVXI2RXgGfX2kMFvfAw6dZ7Nueuxg5A8:0+49lnyeG3D56gXm6Hq8

Score
10/10
meshagentn

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

n

C2

http://meshcent.its.ufanet.ru:443/agent.ashx

Attributes
  • mesh_id

    0x9FC0B7F0F3F342FA6C540F64FB0E05DA2A89F3A01C400E4CE5A7BDE1EAF63D53BDF2C8DAC2CC990C67092AD2A9B92D6F

  • server_id

    92361DD62E17552490F9968C444EAF21618626EC916098B7A27028E3759BECFC00603247A5829F7E5F230D03F82213BF

  • wss

    wss://meshcent.its.ufanet.ru:443/agent.ashx

Targets

    • Target

      2024-10-19_f2d10d991eccb5239734147f4788025c_ryuk_sliver

    • Size

      3.3MB

    • MD5

      f2d10d991eccb5239734147f4788025c

    • SHA1

      c4c9b6fb3eb15b812a6111caf312c8866644f7cc

    • SHA256

      cda0f8d114318e90726736160df44e8c51cf129a7b250e4322453d574303171c

    • SHA512

      f8ff8998f6b1a7cdeb26d93d299891efb4e5b71100d8e6b85d4f15d9cd79d92d0f694ee27e2d2e88b84e43636fa4a17ee306c1a2780df1510556c21d15e3c42b

    • SSDEEP

      49152:0f708gNcR9l5NyQB7q1AlgraPgDLDVXI2RXgGfX2kMFvfAw6dZ7Nueuxg5A8:0+49lnyeG3D56gXm6Hq8

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks