Overview

overview

10

Static

static

10

2024-11-08...er.exe

windows7-x64

1

2024-11-08...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-08_6491d712904a221dd5548513f14f859c_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    241108-bxf7sascmq

  • MD5

    6491d712904a221dd5548513f14f859c

  • SHA1

    5f25790a833e39a62b7ca62f4b0f2f71c2a93fb9

  • SHA256

    beedfaadaf725c8d615df3e78542ab66e92d6b207e4e807cff7371f3aa5652a6

  • SHA512

    407ff853db8d2d084a7dcc8adb5a9f45e4c0d4e08e5221c86da82d9f70f264657ade39bbe101ff6e3091feec583aa33d73c203edeebc50bc02d96a6bf90468bd

  • SSDEEP

    49152:iX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QM:ilRsZ47/QXoHUOfAoj1x6M

Score
10/10
meshagentgunner's

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

Gunner's

Attributes
  • mesh_id

    0xA1EC0AAFA7DD3D0E18031C136FDC6BC3C96BF543A8D61A0CD2958BDFBDBD69518AF7A6F2928D975148FB9DAF9F774339

  • server_id

    96D052D2832B2A2FDA49294D5B5FF1F8C25A5BBE82ABB319264C09CA795618EC3F744F964F1A39768A8012AC604CA448

  • wss

    localhost

Targets

    • Target

      2024-11-08_6491d712904a221dd5548513f14f859c_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      6491d712904a221dd5548513f14f859c

    • SHA1

      5f25790a833e39a62b7ca62f4b0f2f71c2a93fb9

    • SHA256

      beedfaadaf725c8d615df3e78542ab66e92d6b207e4e807cff7371f3aa5652a6

    • SHA512

      407ff853db8d2d084a7dcc8adb5a9f45e4c0d4e08e5221c86da82d9f70f264657ade39bbe101ff6e3091feec583aa33d73c203edeebc50bc02d96a6bf90468bd

    • SSDEEP

      49152:iX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QM:ilRsZ47/QXoHUOfAoj1x6M

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks