General

  • Target

    2024-11-12_ee6a65a738ab4138a73a4ebf556808e3_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    241112-hbaw7sxblj

  • MD5

    ee6a65a738ab4138a73a4ebf556808e3

  • SHA1

    ee91cd8390d760c545e04d25543cf321309649fb

  • SHA256

    002b80c6a6dbc6026ebf7945bba6de989fc98b40d9860675ae894dabbf531df0

  • SHA512

    a4a71019141351b9933f6c438908158f0ffcd0c3d0ccc06c502f5120a61d9f10b90050a40ec5d11cd0af8db142f55041510e76083193c3e6a30859091436e029

  • SSDEEP

    49152:xX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QW:xlRsZ47/QXoHUOfAoj1x6W

Score
10/10

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

j

Attributes
  • mesh_id

    0x6BE76465C17AB33DCD28713328A788836FD82C13A2F7FE212F02D27824FFFEA9C2D82E0F7C164CABFC8DF8D68290F213

  • server_id

    377333CC30C31D65D148826B5B3DBC8E00C8C4B79C62E2D396CA655D370543D0C5D6D95D5F9C2EC2191D7F4FB43A58B3

  • wss

    localhost

Targets

    • Target

      2024-11-12_ee6a65a738ab4138a73a4ebf556808e3_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      ee6a65a738ab4138a73a4ebf556808e3

    • SHA1

      ee91cd8390d760c545e04d25543cf321309649fb

    • SHA256

      002b80c6a6dbc6026ebf7945bba6de989fc98b40d9860675ae894dabbf531df0

    • SHA512

      a4a71019141351b9933f6c438908158f0ffcd0c3d0ccc06c502f5120a61d9f10b90050a40ec5d11cd0af8db142f55041510e76083193c3e6a30859091436e029

    • SSDEEP

      49152:xX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QW:xlRsZ47/QXoHUOfAoj1x6W

    Score
    1/10

MITRE ATT&CK Matrix

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.