General
-
Target
2024-11-27_6a0cae2243599077156e558c78b0939a_ismagent_ryuk_sliver
-
Size
3.3MB
-
Sample
241127-198j8stjht
-
MD5
6a0cae2243599077156e558c78b0939a
-
SHA1
c6428a58fb7fcbe6a5a8fe91d391ab4ffe4bdd48
-
SHA256
cdebbb3ef372539a07335381fbf465505eb3615fa169ed1330e2529518963839
-
SHA512
96ac5c9e41bec4c1ae02230bd68eeccf5a2a9053491a4814176423f936a7e89b7fdc069561332d7cfc8a5e271401ea5c8b0874865a84f6159691a64694e09d98
-
SSDEEP
49152:8f708gNcR9l5NyQB7q1AlgraPgDLDVXI2RXgGfX2kMFvfAw6dZ7Nueuxg5Av:8+49lnyeG3D56gXm6Hqv
Behavioral task
behavioral1
Sample
2024-11-27_6a0cae2243599077156e558c78b0939a_ismagent_ryuk_sliver.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-11-27_6a0cae2243599077156e558c78b0939a_ismagent_ryuk_sliver.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
meshagent
2
ПНИ в Березовке(88054711UL)
http://meshcent.its.ufanet.ru:443/agent.ashx
-
mesh_id
0xB3042C4F5810A702137CCE6980A6ECCBEB1930649AF7740B37602F221717930F592D80CFA03B50F0BC74BE71BFAA48EA
-
server_id
92361DD62E17552490F9968C444EAF21618626EC916098B7A27028E3759BECFC00603247A5829F7E5F230D03F82213BF
-
wss
wss://meshcent.its.ufanet.ru:443/agent.ashx
Targets
-
-
Target
2024-11-27_6a0cae2243599077156e558c78b0939a_ismagent_ryuk_sliver
-
Size
3.3MB
-
MD5
6a0cae2243599077156e558c78b0939a
-
SHA1
c6428a58fb7fcbe6a5a8fe91d391ab4ffe4bdd48
-
SHA256
cdebbb3ef372539a07335381fbf465505eb3615fa169ed1330e2529518963839
-
SHA512
96ac5c9e41bec4c1ae02230bd68eeccf5a2a9053491a4814176423f936a7e89b7fdc069561332d7cfc8a5e271401ea5c8b0874865a84f6159691a64694e09d98
-
SSDEEP
49152:8f708gNcR9l5NyQB7q1AlgraPgDLDVXI2RXgGfX2kMFvfAw6dZ7Nueuxg5Av:8+49lnyeG3D56gXm6Hqv
Score1/10 -