Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-10-28...er.exe

windows7-x64

1

2024-10-28...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-28_847c18c86627996cacf91bd47747dfec_ryuk_sliver

  • Size

    3.3MB

  • Sample

    241028-pmdwkazbmj

  • MD5

    847c18c86627996cacf91bd47747dfec

  • SHA1

    3ab9cc24e93ed0aa3a3bfc1cfe033e4855fcaf89

  • SHA256

    eb098537a1fc2bbb2daa81346a5de576899affca1356d69a19957288952784f2

  • SHA512

    f3c65b279216a07cd8f3b560230703522659331bc1dbb520580d577d730632403fd126b257eb301f51d0481939b2ca59ab756eb36d39ad3795c9e326cdc71b18

  • SSDEEP

    49152:iX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Q1:ilRsZ47/QXoHUOfAoj1x61

Score
10/10
meshagentnew user

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

New User

Attributes
  • mesh_id

    0x0EFB4AC7F48EFFDFDF489A778C9FE75CBA24DB95C948664A464255CD106A5D2693E21CDD93E02CC58C2D819E28E7261D

  • server_id

    45A002F9B480D32BFA9602FF4F35D8D2FE880A4B54901A2BBBE4316A1FE95DFF1B9D94B2D0166FEDF3E2F653B6417341

  • wss

    localhost

Targets

    • Target

      2024-10-28_847c18c86627996cacf91bd47747dfec_ryuk_sliver

    • Size

      3.3MB

    • MD5

      847c18c86627996cacf91bd47747dfec

    • SHA1

      3ab9cc24e93ed0aa3a3bfc1cfe033e4855fcaf89

    • SHA256

      eb098537a1fc2bbb2daa81346a5de576899affca1356d69a19957288952784f2

    • SHA512

      f3c65b279216a07cd8f3b560230703522659331bc1dbb520580d577d730632403fd126b257eb301f51d0481939b2ca59ab756eb36d39ad3795c9e326cdc71b18

    • SSDEEP

      49152:iX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Q1:ilRsZ47/QXoHUOfAoj1x61

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks