Overview

overview

10

Static

static

10

2024-11-14...er.exe

windows7-x64

1

2024-11-14...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-14_8d8c19b27fdeb662544c0a1c8bc5eebf_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    241114-ktghtawgpr

  • MD5

    8d8c19b27fdeb662544c0a1c8bc5eebf

  • SHA1

    fe6056c51952fa8bf3e7f71a42247ccc07153481

  • SHA256

    f8d3b5d459373406b3c2386e8f886d8f385cf8271ce81a8787bf9f53180590f4

  • SHA512

    5f05627a5c4ea889cc3994895a3421410ed2312410b289bd1ec3fd6d595add8b2ec0634b936ac6444180abb84dc44b6386f2227ae606126096dfa338b0ea3add

  • SSDEEP

    49152:pf708gNcR9l5NyQB7q1AlgraPgDLDVXI2RXgGfX2kMFvfAw6dZ7Nueuxg5AV:p+49lnyeG3D56gXm6HqV

Score
10/10
meshagentgibson, john

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

Gibson, John

C2

http://is-a.guru:443/pcdoc/agent.ashx

Attributes
  • mesh_id

    0x54087E6FF493E0CB06EE2D84D6E284DA76785EBF020A135B9159FA8EC2CAC24C2F2E281A4F3594CA4CB97266E677641E

  • server_id

    AE24D80529670B950C95C5434E33CAF22167A15ABDA1C3A6D3822A99C71F70BFBC9596FCD488BA20E0839FEF738CD0F3

  • wss

    wss://is-a.guru:443/pcdoc/agent.ashx

Targets

    • Target

      2024-11-14_8d8c19b27fdeb662544c0a1c8bc5eebf_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      8d8c19b27fdeb662544c0a1c8bc5eebf

    • SHA1

      fe6056c51952fa8bf3e7f71a42247ccc07153481

    • SHA256

      f8d3b5d459373406b3c2386e8f886d8f385cf8271ce81a8787bf9f53180590f4

    • SHA512

      5f05627a5c4ea889cc3994895a3421410ed2312410b289bd1ec3fd6d595add8b2ec0634b936ac6444180abb84dc44b6386f2227ae606126096dfa338b0ea3add

    • SSDEEP

      49152:pf708gNcR9l5NyQB7q1AlgraPgDLDVXI2RXgGfX2kMFvfAw6dZ7Nueuxg5AV:p+49lnyeG3D56gXm6HqV

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks