Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-10-20...er.exe

windows7-x64

1

2024-10-20...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-20_533f3a4b5fd7ba7f8a28b854d5422ce8_ryuk_sliver

  • Size

    3.3MB

  • Sample

    241020-lhq4js1djg

  • MD5

    533f3a4b5fd7ba7f8a28b854d5422ce8

  • SHA1

    a8e6d2a27ec67305170a2ee29d2b8bfdf331cee5

  • SHA256

    ef1dfb3df733af00254525e48ab530729dec337e663e0af2d61c2a6425c93f6e

  • SHA512

    270a73727d22edd3824a33730f07d48a774fb261996f7c0477b9384dc6fe38a129c3d9fc0fa1d35bd61f93f52fa5c9e290147f61db5418c3a2cc35de1f4c9d50

  • SSDEEP

    49152:pX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QQ:plRsZ47/QXoHUOfAoj1x6Q

Score
10/10
meshagenttacticalrmm

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

TacticalRMM

C2

http://mesh.dcsystems.it:443/agent.ashx

Attributes
  • mesh_id

    0x7DE8FCE061E6BAF045F071F952C39B25C31ADDFBC9560A15F2F98DA522F3E0F6D4325EA2D0A576B6EBA484D2D3C2EAAE

  • server_id

    644FB419197FF9BE9269B897293812EA3075B6C0C9E63D5F8D22C974AECE435C5862E6436AC723F03BF4BF0F2D1EC81A

  • wss

    wss://mesh.dcsystems.it:443/agent.ashx

Targets

    • Target

      2024-10-20_533f3a4b5fd7ba7f8a28b854d5422ce8_ryuk_sliver

    • Size

      3.3MB

    • MD5

      533f3a4b5fd7ba7f8a28b854d5422ce8

    • SHA1

      a8e6d2a27ec67305170a2ee29d2b8bfdf331cee5

    • SHA256

      ef1dfb3df733af00254525e48ab530729dec337e663e0af2d61c2a6425c93f6e

    • SHA512

      270a73727d22edd3824a33730f07d48a774fb261996f7c0477b9384dc6fe38a129c3d9fc0fa1d35bd61f93f52fa5c9e290147f61db5418c3a2cc35de1f4c9d50

    • SSDEEP

      49152:pX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QQ:plRsZ47/QXoHUOfAoj1x6Q

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks