Overview

overview

10

Static

static

10

2024-11-19...er.exe

windows7-x64

1

2024-11-19...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-19_84fafdc812b1987d1f89f80702687bc8_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    241119-qsekqaxcrq

  • MD5

    84fafdc812b1987d1f89f80702687bc8

  • SHA1

    0cf325274a0a4c41888bb19a66c3c1dc97559bd3

  • SHA256

    51327b33f079e0c8899605dfeb1a6829091ad01eb3250415c7d7854f77600edd

  • SHA512

    9bf36a1e2280c9d447f6a8601c80409e557f641c72f1b7df9897e80fdb7b5503d86ddb46aef8778abf9f3c550223fb6f1da7e80cf42e9b2d3acc6c8f47cf9db3

  • SSDEEP

    49152:Af708gNcR9l5NyQB7q1AlgraPgDLDVXI2RXgGfX2kMFvfAw6dZ7Nueuxg5AM:A+49lnyeG3D56gXm6HqM

Score
10/10
meshagent108-2 truenas

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

108-2 TrueNAS

C2

http://control3.colizeumarena.ru:443/agent.ashx

Attributes
  • mesh_id

    0xD8079D8749F0D6C63877B253F85FA5ABD60E5387A33FC9255937836C969CEB5642D79A9768695AC3CE2ED050FC06AC59

  • server_id

    C1139252AFB8BB79497F4C3FFFE817B4721FC57DF5DB25C1AFDFE4C5780D3D815802672B52644A626A44410DFFDE7D27

  • wss

    wss://control3.colizeumarena.ru:443/agent.ashx

Targets

    • Target

      2024-11-19_84fafdc812b1987d1f89f80702687bc8_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      84fafdc812b1987d1f89f80702687bc8

    • SHA1

      0cf325274a0a4c41888bb19a66c3c1dc97559bd3

    • SHA256

      51327b33f079e0c8899605dfeb1a6829091ad01eb3250415c7d7854f77600edd

    • SHA512

      9bf36a1e2280c9d447f6a8601c80409e557f641c72f1b7df9897e80fdb7b5503d86ddb46aef8778abf9f3c550223fb6f1da7e80cf42e9b2d3acc6c8f47cf9db3

    • SSDEEP

      49152:Af708gNcR9l5NyQB7q1AlgraPgDLDVXI2RXgGfX2kMFvfAw6dZ7Nueuxg5AM:A+49lnyeG3D56gXm6HqM

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks