Overview

overview

10

Static

static

10

2024-11-22...er.exe

windows7-x64

1

2024-11-22...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-22_8c68f97d9000d5476e2bf4bf6b0069ea_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    241122-pl6j7awpem

  • MD5

    8c68f97d9000d5476e2bf4bf6b0069ea

  • SHA1

    c0b25852bfa2940b4ac7ceb2c7550b87f3a170ee

  • SHA256

    696e405799cdf82f0a5d3152e7537a0fbf46679a9142aa425bcde37517fa41b5

  • SHA512

    53e9691dcb086b4654dc33b7b87bea5c0e5d7efbf15c11b6a3e128d9214ecbbc0cac944e507354a92ba4d4b28b2883923a53a35bd7fe04504be8b108db8d3bf4

  • SSDEEP

    49152:rX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qx:rlRsZ47/QXoHUOfAoj1x6x

Score
10/10
meshagent10 - crou - batiment j - personnel

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

10 - Crou - Batiment J - Personnel

C2

http://meshcentral.mines-ales.fr:443/agent.ashx

Attributes
  • mesh_id

    0x7C001D0D476027EC13F04C9D0C54F4D951D2A20BC47A2D110EA2F3BCA22AA992FEC5CC38FF53F651785CF7980991F70F

  • server_id

    175C41AA52F8FD7A243FB1660CF1C07133842DE99A41F32D894277478AADD03C3DBB81E76DB68494689B9143632C83C7

  • wss

    wss://meshcentral.mines-ales.fr:443/agent.ashx

Targets

    • Target

      2024-11-22_8c68f97d9000d5476e2bf4bf6b0069ea_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      8c68f97d9000d5476e2bf4bf6b0069ea

    • SHA1

      c0b25852bfa2940b4ac7ceb2c7550b87f3a170ee

    • SHA256

      696e405799cdf82f0a5d3152e7537a0fbf46679a9142aa425bcde37517fa41b5

    • SHA512

      53e9691dcb086b4654dc33b7b87bea5c0e5d7efbf15c11b6a3e128d9214ecbbc0cac944e507354a92ba4d4b28b2883923a53a35bd7fe04504be8b108db8d3bf4

    • SSDEEP

      49152:rX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qx:rlRsZ47/QXoHUOfAoj1x6x

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks