Overview

overview

10

Static

static

10

2024-11-12...er.exe

windows7-x64

1

2024-11-12...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-12_ee6a65a738ab4138a73a4ebf556808e3_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    241112-g89w5axbme

  • MD5

    ee6a65a738ab4138a73a4ebf556808e3

  • SHA1

    ee91cd8390d760c545e04d25543cf321309649fb

  • SHA256

    002b80c6a6dbc6026ebf7945bba6de989fc98b40d9860675ae894dabbf531df0

  • SHA512

    a4a71019141351b9933f6c438908158f0ffcd0c3d0ccc06c502f5120a61d9f10b90050a40ec5d11cd0af8db142f55041510e76083193c3e6a30859091436e029

  • SSDEEP

    49152:xX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QW:xlRsZ47/QXoHUOfAoj1x6W

Score
10/10
meshagentj

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

j

Attributes
  • mesh_id

    0x6BE76465C17AB33DCD28713328A788836FD82C13A2F7FE212F02D27824FFFEA9C2D82E0F7C164CABFC8DF8D68290F213

  • server_id

    377333CC30C31D65D148826B5B3DBC8E00C8C4B79C62E2D396CA655D370543D0C5D6D95D5F9C2EC2191D7F4FB43A58B3

  • wss

    localhost

Targets

    • Target

      2024-11-12_ee6a65a738ab4138a73a4ebf556808e3_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      ee6a65a738ab4138a73a4ebf556808e3

    • SHA1

      ee91cd8390d760c545e04d25543cf321309649fb

    • SHA256

      002b80c6a6dbc6026ebf7945bba6de989fc98b40d9860675ae894dabbf531df0

    • SHA512

      a4a71019141351b9933f6c438908158f0ffcd0c3d0ccc06c502f5120a61d9f10b90050a40ec5d11cd0af8db142f55041510e76083193c3e6a30859091436e029

    • SSDEEP

      49152:xX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QW:xlRsZ47/QXoHUOfAoj1x6W

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks