Overview

overview

10

Static

static

10

2024-11-23...er.exe

windows7-x64

1

2024-11-23...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-23_ecbc0c9ade6cad19f8cccff003b73558_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    241123-1aeg4sxmc1

  • MD5

    ecbc0c9ade6cad19f8cccff003b73558

  • SHA1

    2994bc4af27107a55704a661cc158c2a747e13dd

  • SHA256

    91d5fe6dd25a873126aabcd3e8de048c248fcd7d4c913c2d68ddbfab784a747d

  • SHA512

    ce644719a8d9b2123cafb3db8a9ca14fbb42a0d9124fa66d19a4aff613f3480ecee96ac52e718dd1662ba9e769752f2f1e7fdc1306354c88224783117d8e454a

  • SSDEEP

    49152:iX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QP:ilRsZ47/QXoHUOfAoj1x6P

Score
10/10
meshagentjenna's pc

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

Jenna's Pc

Attributes
  • mesh_id

    0x30AFDC8688CC325B75CAA132BFDE0351C45141404C2AD85730EE1B877D5C75564A6F702A5B57E0D878DD6C556EC3E3FB

  • server_id

    96D052D2832B2A2FDA49294D5B5FF1F8C25A5BBE82ABB319264C09CA795618EC3F744F964F1A39768A8012AC604CA448

  • wss

    localhost

Targets

    • Target

      2024-11-23_ecbc0c9ade6cad19f8cccff003b73558_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      ecbc0c9ade6cad19f8cccff003b73558

    • SHA1

      2994bc4af27107a55704a661cc158c2a747e13dd

    • SHA256

      91d5fe6dd25a873126aabcd3e8de048c248fcd7d4c913c2d68ddbfab784a747d

    • SHA512

      ce644719a8d9b2123cafb3db8a9ca14fbb42a0d9124fa66d19a4aff613f3480ecee96ac52e718dd1662ba9e769752f2f1e7fdc1306354c88224783117d8e454a

    • SSDEEP

      49152:iX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QP:ilRsZ47/QXoHUOfAoj1x6P

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks