Overview

overview

10

Static

static

10

2024-11-24...er.exe

windows7-x64

1

2024-11-24...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-24_0dec7a4cddce109aa0751d76812bd1fa_ismagent_ryuk_sliver

  • Size

    3.4MB

  • Sample

    241124-r51t6atrhw

  • MD5

    0dec7a4cddce109aa0751d76812bd1fa

  • SHA1

    3d9cfcba83fe1a0047cb404e48d6f95a58c7efc8

  • SHA256

    e12ef05b83961679c909608889b56e06e8229f87c0a3bd6d0616274df9e457c0

  • SHA512

    84303a81f012e6f4d9ef4ff714a93097de1c545df146817531aba1b00446acc85103e37aff3ad2cece6e0d0f0f98c324dce5c76b509a388ad2568140a56b8790

  • SSDEEP

    49152:MX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQed58:MlRsZ47/QXoHUOfAoj1Iy

Score
10/10
meshagenthonda

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

honda

C2

http://remoteshare.in:443/agent.ashx

Attributes
  • mesh_id

    0x358D6BE4001298613B0DADBD3F028FBBDCF665BF1D2E0DCA5732C077012C5D103EAB830459E60D03640E098F0021D1ED

  • server_id

    C6DE5260F3DF733E712F21316EE6EE643ABC568C44EC1AE991C57525DD26FAF883ED8D9A208F6CD34C3CC1CF7943ECD7

  • wss

    wss://remoteshare.in:443/agent.ashx

Targets

    • Target

      2024-11-24_0dec7a4cddce109aa0751d76812bd1fa_ismagent_ryuk_sliver

    • Size

      3.4MB

    • MD5

      0dec7a4cddce109aa0751d76812bd1fa

    • SHA1

      3d9cfcba83fe1a0047cb404e48d6f95a58c7efc8

    • SHA256

      e12ef05b83961679c909608889b56e06e8229f87c0a3bd6d0616274df9e457c0

    • SHA512

      84303a81f012e6f4d9ef4ff714a93097de1c545df146817531aba1b00446acc85103e37aff3ad2cece6e0d0f0f98c324dce5c76b509a388ad2568140a56b8790

    • SSDEEP

      49152:MX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQed58:MlRsZ47/QXoHUOfAoj1Iy

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks