Overview

overview

10

Static

static

10

2024-11-05...er.exe

windows7-x64

1

2024-11-05...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-05_195c4b5c5d6df2848eda873b3f422bcb_ryuk_sliver

  • Size

    3.4MB

  • Sample

    241105-h7hxpawnh1

  • MD5

    195c4b5c5d6df2848eda873b3f422bcb

  • SHA1

    066d516ba43215a1cb5f41f9612653911fd586cc

  • SHA256

    8842aacd02e49a3ade932e8733c56ffce0e8410f35c8a1010916f01ad5c45ca4

  • SHA512

    f5a74f1054ef8d3b1ec82b4556a905d70541391104430de6a4450a4d8915251b1c9a0abc55dba0c9f138133a140d7019f67ee24e48afea5d1b88d70eba69faad

  • SSDEEP

    49152:mX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQeN5PV:mlRsZ47/QXoHUOfAoj1Mv

Score
10/10
meshagentгиппократ мц

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

Гиппократ МЦ

C2

http://mc.ininform.ru:443/agent.ashx

Attributes
  • mesh_id

    0xBD8591F4758B08EB19216A7A56051757559E66BFEC60A4FCB8E68F1F63990A7DD15308BEC060403BC4D987D1CA561757

  • server_id

    A7981104AA9754FFA09FD49CB40717D2D8C4E770BF960B3907F2A61907B412226E78EFFEA1240F169FFBE9959C55FBEB

  • wss

    wss://mc.ininform.ru:443/agent.ashx

Targets

    • Target

      2024-11-05_195c4b5c5d6df2848eda873b3f422bcb_ryuk_sliver

    • Size

      3.4MB

    • MD5

      195c4b5c5d6df2848eda873b3f422bcb

    • SHA1

      066d516ba43215a1cb5f41f9612653911fd586cc

    • SHA256

      8842aacd02e49a3ade932e8733c56ffce0e8410f35c8a1010916f01ad5c45ca4

    • SHA512

      f5a74f1054ef8d3b1ec82b4556a905d70541391104430de6a4450a4d8915251b1c9a0abc55dba0c9f138133a140d7019f67ee24e48afea5d1b88d70eba69faad

    • SSDEEP

      49152:mX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQeN5PV:mlRsZ47/QXoHUOfAoj1Mv

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks