Overview

overview

10

Static

static

10

2024-10-30...er.exe

windows7-x64

1

2024-10-30...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-30_d7279ddd18f26657ace7fe57b752985b_ryuk_sliver

  • Size

    4.7MB

  • Sample

    241030-zt3hls1dqc

  • MD5

    d7279ddd18f26657ace7fe57b752985b

  • SHA1

    628e1017db50c53c675a03a54a253f43d8d7a511

  • SHA256

    7dbe5306129999abcfaef2b96d2975b4e8471183842f05d54a188341f410e4e2

  • SHA512

    3615ecc2dc63225480a7a3992d67c75fffa184c8504092d56c296e8ec4514434af0c636ca54899e127b47e95abc44d7a3d903a5d938a3d166208926e254ef348

  • SSDEEP

    49152:GX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe15m:GlRsZ47/QXoHUOfAoj1ok

Score
10/10
meshagenteric

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

Eric

C2

http://eric.igrejadocomando.site:443/agent.ashx

Attributes
  • mesh_id

    0x36A0C90F9081A9D23188236083C0A5B35F4D344FA79E0FE99AF47AE14C33249F35B976623F293B5DCCCD5FAF51A1C99A

  • server_id

    EC5C307251FA062049610B3FEF78D9E0BA43D9F0DA731DCF53DD27A84E39E277F3CBBDD1C3CE854720F8CAED7E741161

  • wss

    wss://eric.igrejadocomando.site:443/agent.ashx

Targets

    • Target

      2024-10-30_d7279ddd18f26657ace7fe57b752985b_ryuk_sliver

    • Size

      4.7MB

    • MD5

      d7279ddd18f26657ace7fe57b752985b

    • SHA1

      628e1017db50c53c675a03a54a253f43d8d7a511

    • SHA256

      7dbe5306129999abcfaef2b96d2975b4e8471183842f05d54a188341f410e4e2

    • SHA512

      3615ecc2dc63225480a7a3992d67c75fffa184c8504092d56c296e8ec4514434af0c636ca54899e127b47e95abc44d7a3d903a5d938a3d166208926e254ef348

    • SSDEEP

      49152:GX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe15m:GlRsZ47/QXoHUOfAoj1ok

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks