Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-10-22...er.exe

windows7-x64

1

2024-10-22...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-22_91c8341341b7bc8ea2a33019c6be698e_ryuk_sliver

  • Size

    3.3MB

  • Sample

    241022-mmc8xszgqb

  • MD5

    91c8341341b7bc8ea2a33019c6be698e

  • SHA1

    c7dee4525f44a7ddd183637600e38765104c74f0

  • SHA256

    cea76ae8673dc0720df6b8b30d3a94076a50457d6229214be24178c7c6b9c13a

  • SHA512

    e183fce29f59e1bc6bbeeea0fd2e0c9804cffa67f2896c232963580e6a3a3b2ee30b6fb53baf95d975ec0adcba47055a80654393331d37edb664e3b37ad93f68

  • SSDEEP

    49152:pX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qw:plRsZ47/QXoHUOfAoj1x6w

Score
10/10
meshagentměstský úřad

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

Městský úřad

C2

http://meshcentral.vmyto.cz:443/agent.ashx

Attributes
  • mesh_id

    0xAA8F6C1789433CAB69C4150C6E1EABB1F5304A950984760200FFB2AEB92021FB0ADDCDC3947AC08A138D670E0F70DDC2

  • server_id

    9EB02F255B72F17C544F1DC2086CC90E677EA926A4462B277020BB890376304CFE38CE303D859C9F79BBC129D55D37BB

  • wss

    wss://meshcentral.vmyto.cz:443/agent.ashx

Targets

    • Target

      2024-10-22_91c8341341b7bc8ea2a33019c6be698e_ryuk_sliver

    • Size

      3.3MB

    • MD5

      91c8341341b7bc8ea2a33019c6be698e

    • SHA1

      c7dee4525f44a7ddd183637600e38765104c74f0

    • SHA256

      cea76ae8673dc0720df6b8b30d3a94076a50457d6229214be24178c7c6b9c13a

    • SHA512

      e183fce29f59e1bc6bbeeea0fd2e0c9804cffa67f2896c232963580e6a3a3b2ee30b6fb53baf95d975ec0adcba47055a80654393331d37edb664e3b37ad93f68

    • SSDEEP

      49152:pX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qw:plRsZ47/QXoHUOfAoj1x6w

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks