Overview

overview

10

Static

static

10

2024-11-13...er.exe

windows7-x64

1

2024-11-13...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-13_af8267ff11cf4adfd2bf6e4e1065aae1_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    241113-mjyqfstkhj

  • MD5

    af8267ff11cf4adfd2bf6e4e1065aae1

  • SHA1

    3277a6d6e8e16bdd4ee34a78164a1b657ba97b43

  • SHA256

    e82ea98e7e5b0fa515a39265716d581831e7d97e4d1a9db71cbe940ff126494c

  • SHA512

    968179abf8c487d4caaee0a20950358bb4171b0bfb38f3997b61699292d1f80f1ef67e50a3be72b440d5a1560b74f743013c1bc6ca4e1cbd821b9dce18f8a3dc

  • SSDEEP

    49152:qX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qs:qlRsZ47/QXoHUOfAoj1x6s

Score
10/10
meshagentgenerale

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

GENERALE

C2

http://assistenza.freeddns.org:443/agent.ashx

Attributes
  • mesh_id

    0xBEA8DBFA06B29263BED7C00875E53180B8C15B085BB4E60BA3DE85FAB25D90620FF8D7B04BA5D529058566AD6CF90FAB

  • server_id

    3E56B64F28E1B34667AE83E0220E703ACA41C135A19FE085A00B843BF81DBD9EEF8E628C1E29ABD0B3804C09AC2069AE

  • wss

    wss://assistenza.freeddns.org:443/agent.ashx

Targets

    • Target

      2024-11-13_af8267ff11cf4adfd2bf6e4e1065aae1_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      af8267ff11cf4adfd2bf6e4e1065aae1

    • SHA1

      3277a6d6e8e16bdd4ee34a78164a1b657ba97b43

    • SHA256

      e82ea98e7e5b0fa515a39265716d581831e7d97e4d1a9db71cbe940ff126494c

    • SHA512

      968179abf8c487d4caaee0a20950358bb4171b0bfb38f3997b61699292d1f80f1ef67e50a3be72b440d5a1560b74f743013c1bc6ca4e1cbd821b9dce18f8a3dc

    • SSDEEP

      49152:qX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qs:qlRsZ47/QXoHUOfAoj1x6s

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks