Overview

overview

10

Static

static

10

2024-11-30...er.exe

windows7-x64

1

2024-11-30...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-30_4e392b3407343126a1adff3a06fdf948_ismagent_ryuk_sliver

  • Size

    3.4MB

  • Sample

    241130-lfqp1azqht

  • MD5

    4e392b3407343126a1adff3a06fdf948

  • SHA1

    ac79f918b0fc78bf12c564de197775ffaa452e5a

  • SHA256

    f9234bd1fdb584b6551a3c57ce06cd6f7dab0fdf4f8427acaaf7bdb6bf789a86

  • SHA512

    762061853674241c74eb1f727af99b852e8b12210376a2e44e22ec335e785c42e111cb44ff48f763ea7db7fedb5dd28d35cea28561349e1107504a7899dcd80f

  • SSDEEP

    49152:KX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QA:KlRsZ47/QXoHUOfAoj1x6A

Score
10/10
meshagentsupport

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

Support

C2

http://artiq.my:443/agent.ashx

Attributes
  • mesh_id

    0x7C5CEC7FCF3DE7330498C38520267614BA238790E8DE7CF67735022DFEC1C0DCEB25A45848A628B47B6E51DEF1D80E52

  • server_id

    949AAFC5FD7371C1772AF0F66C099D24D1EE2EAA3BF4C5FFB91983B3E44B9D504815B6A14CEC509DCBB1A852AD919C96

  • wss

    wss://artiq.my:443/agent.ashx

Targets

    • Target

      2024-11-30_4e392b3407343126a1adff3a06fdf948_ismagent_ryuk_sliver

    • Size

      3.4MB

    • MD5

      4e392b3407343126a1adff3a06fdf948

    • SHA1

      ac79f918b0fc78bf12c564de197775ffaa452e5a

    • SHA256

      f9234bd1fdb584b6551a3c57ce06cd6f7dab0fdf4f8427acaaf7bdb6bf789a86

    • SHA512

      762061853674241c74eb1f727af99b852e8b12210376a2e44e22ec335e785c42e111cb44ff48f763ea7db7fedb5dd28d35cea28561349e1107504a7899dcd80f

    • SSDEEP

      49152:KX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QA:KlRsZ47/QXoHUOfAoj1x6A

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks