Overview

overview

10

Static

static

10

2024-11-27...er.exe

windows7-x64

1

2024-11-27...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-27_db549da8344f4ada79131981eb1ec908_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    241127-lkxn4sxrcz

  • MD5

    db549da8344f4ada79131981eb1ec908

  • SHA1

    32845da4cc1919021ae6586a7462fac1c41a05e4

  • SHA256

    07b422bdcc6fc889390a8f38ec8072fe7f760c68d860e3a6610639dfe4ef9ab0

  • SHA512

    a7d431ad08d72b1364fee5c084552147ef46a0ec94b1dd304d3cc55552931f1593e600f2645a4099464538dcd138849492cdafe0974f6a3d9e58cd6e51a1dc3c

  • SSDEEP

    49152:IX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qk:IlRsZ47/QXoHUOfAoj1x6k

Score
10/10
meshagenttacticalrmm

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

TacticalRMM

C2

http://mesh.bitnix.network:443/agent.ashx

Attributes
  • mesh_id

    0xAAB2709F9C1C55A77FF2090A45A17409AC36CB98C44E7A48E267B654A1A546E17B74F94B04D2E07FB165EE37E27F71FF

  • server_id

    488AEC8138999B19EA1B91AF139191BF228A86B90F4FD38794E942C58DF888597786733268232EC89904FEE326A8FB93

  • wss

    wss://mesh.bitnix.network:443/agent.ashx

Targets

    • Target

      2024-11-27_db549da8344f4ada79131981eb1ec908_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      db549da8344f4ada79131981eb1ec908

    • SHA1

      32845da4cc1919021ae6586a7462fac1c41a05e4

    • SHA256

      07b422bdcc6fc889390a8f38ec8072fe7f760c68d860e3a6610639dfe4ef9ab0

    • SHA512

      a7d431ad08d72b1364fee5c084552147ef46a0ec94b1dd304d3cc55552931f1593e600f2645a4099464538dcd138849492cdafe0974f6a3d9e58cd6e51a1dc3c

    • SSDEEP

      49152:IX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qk:IlRsZ47/QXoHUOfAoj1x6k

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks