General

  • Target

    2024-11-27_6a0cae2243599077156e558c78b0939a_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    241127-198j8stjht

  • MD5

    6a0cae2243599077156e558c78b0939a

  • SHA1

    c6428a58fb7fcbe6a5a8fe91d391ab4ffe4bdd48

  • SHA256

    cdebbb3ef372539a07335381fbf465505eb3615fa169ed1330e2529518963839

  • SHA512

    96ac5c9e41bec4c1ae02230bd68eeccf5a2a9053491a4814176423f936a7e89b7fdc069561332d7cfc8a5e271401ea5c8b0874865a84f6159691a64694e09d98

  • SSDEEP

    49152:8f708gNcR9l5NyQB7q1AlgraPgDLDVXI2RXgGfX2kMFvfAw6dZ7Nueuxg5Av:8+49lnyeG3D56gXm6Hqv

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

ПНИ в Березовке(88054711UL)

C2

http://meshcent.its.ufanet.ru:443/agent.ashx

Attributes
  • mesh_id

    0xB3042C4F5810A702137CCE6980A6ECCBEB1930649AF7740B37602F221717930F592D80CFA03B50F0BC74BE71BFAA48EA

  • server_id

    92361DD62E17552490F9968C444EAF21618626EC916098B7A27028E3759BECFC00603247A5829F7E5F230D03F82213BF

  • wss

    wss://meshcent.its.ufanet.ru:443/agent.ashx

Targets

    • Target

      2024-11-27_6a0cae2243599077156e558c78b0939a_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      6a0cae2243599077156e558c78b0939a

    • SHA1

      c6428a58fb7fcbe6a5a8fe91d391ab4ffe4bdd48

    • SHA256

      cdebbb3ef372539a07335381fbf465505eb3615fa169ed1330e2529518963839

    • SHA512

      96ac5c9e41bec4c1ae02230bd68eeccf5a2a9053491a4814176423f936a7e89b7fdc069561332d7cfc8a5e271401ea5c8b0874865a84f6159691a64694e09d98

    • SSDEEP

      49152:8f708gNcR9l5NyQB7q1AlgraPgDLDVXI2RXgGfX2kMFvfAw6dZ7Nueuxg5Av:8+49lnyeG3D56gXm6Hqv

    Score
    1/10

MITRE ATT&CK Matrix

Tasks