Overview

overview

10

Static

static

10

2024-11-18...er.exe

windows7-x64

1

2024-11-18...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-18_a17a85db2e8f47b69d4907d1f18c414c_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    241118-lmlpmatla1

  • MD5

    a17a85db2e8f47b69d4907d1f18c414c

  • SHA1

    767ecfeecbfd82e792bba3baba204fbfe884c79e

  • SHA256

    4c418961691ebdb1179c4ccefe56a0c09849e28fded0fed7db567c0a3add97a3

  • SHA512

    f5280065ca0e44f06cc1511b67439d042ffbfc87aca70b4d2ad65dd72703e634bbc7c578230a403d044a2f8fbe8b67715969ddaf8f2e733d9ba480d0da29b8a4

  • SSDEEP

    49152:4X3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QA:4lRsZ47/QXoHUOfAoj1x6A

Score
10/10
meshagentpix

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

pix

C2

http://pixve.net.pix:443/agent.ashx

Attributes
  • mesh_id

    0x2F8B0933957D1EB09C2AAF3F47FF7871A58887C77C7AE0CFCA247B2CFC06FF3504C05FC8F6D41826EA66AD774D29B799

  • server_id

    B768687494307AF6E545508A242FD52B0E9488F30A66D3EA9416ECFF04556434A6319D3C6761DCA1B40310F767402E9D

  • wss

    wss://pixve.net.pix:443/agent.ashx

Targets

    • Target

      2024-11-18_a17a85db2e8f47b69d4907d1f18c414c_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      a17a85db2e8f47b69d4907d1f18c414c

    • SHA1

      767ecfeecbfd82e792bba3baba204fbfe884c79e

    • SHA256

      4c418961691ebdb1179c4ccefe56a0c09849e28fded0fed7db567c0a3add97a3

    • SHA512

      f5280065ca0e44f06cc1511b67439d042ffbfc87aca70b4d2ad65dd72703e634bbc7c578230a403d044a2f8fbe8b67715969ddaf8f2e733d9ba480d0da29b8a4

    • SSDEEP

      49152:4X3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QA:4lRsZ47/QXoHUOfAoj1x6A

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks