Overview

overview

10

Static

static

10

2024-11-27...er.exe

windows7-x64

1

2024-11-27...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-27_c0fc7db406e1854a6f0329bec2aa04c7_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    241127-a76dzsyjhx

  • MD5

    c0fc7db406e1854a6f0329bec2aa04c7

  • SHA1

    0fed31f6e661bcbd4eb3268345f83a332735d1fd

  • SHA256

    66dcd126c7235bdf7e80ec1acd75e5d2fa59dbb2ee4c235ed1adb49cd55e3c04

  • SHA512

    52f6a8c505b670bd1e899c55de043c12dbfffd02990d8ea2266f1f5e99f597d811563f40405c0a3b26c3fc594e798b00999e1b3733ccac9f60802e4854da5b4d

  • SSDEEP

    49152:Mf708gNcR9l5NyQB7q1AlgraPgDLDVXI2RXgGfX2kMFvfAw6dZ7Nueuxg5AI:M+49lnyeG3D56gXm6HqI

Score
10/10
meshagentцдтт "радуга"

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

ЦДТТ "Радуга"

C2

http://meshcent.its.ufanet.ru:443/agent.ashx

Attributes
  • mesh_id

    0x51EFFD31C20AB1F9D216CFAAAC08B8425C75BB6AD58525C77DA6C3F713B48011EABFDC6DD5EF90B1C471E53A4E4D04DF

  • server_id

    92361DD62E17552490F9968C444EAF21618626EC916098B7A27028E3759BECFC00603247A5829F7E5F230D03F82213BF

  • wss

    wss://meshcent.its.ufanet.ru:443/agent.ashx

Targets

    • Target

      2024-11-27_c0fc7db406e1854a6f0329bec2aa04c7_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      c0fc7db406e1854a6f0329bec2aa04c7

    • SHA1

      0fed31f6e661bcbd4eb3268345f83a332735d1fd

    • SHA256

      66dcd126c7235bdf7e80ec1acd75e5d2fa59dbb2ee4c235ed1adb49cd55e3c04

    • SHA512

      52f6a8c505b670bd1e899c55de043c12dbfffd02990d8ea2266f1f5e99f597d811563f40405c0a3b26c3fc594e798b00999e1b3733ccac9f60802e4854da5b4d

    • SSDEEP

      49152:Mf708gNcR9l5NyQB7q1AlgraPgDLDVXI2RXgGfX2kMFvfAw6dZ7Nueuxg5AI:M+49lnyeG3D56gXm6HqI

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks