Overview

overview

10

Static

static

10

2024-12-01...er.exe

windows7-x64

1

2024-12-01...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-01_760b9213dd516c7716cea77360c473f0_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    241201-e2paqswrfy

  • MD5

    760b9213dd516c7716cea77360c473f0

  • SHA1

    11e5dd8fd125dde38941c3cecfe0549472c4a171

  • SHA256

    7845abe430355e7cbe2f76c9f59ed53b658e1fea42cd0a87f0e6c2480bf7a184

  • SHA512

    13019add4111afec83065c5dd7c64bd49f2155b8b0df495cf6b961f2bd958a96dcc5eff5f28f5884e88b8d14018725f14a95d2ed65942aa878ba0e1209e1e278

  • SSDEEP

    49152:pX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QX:plRsZ47/QXoHUOfAoj1x6X

Score
10/10
meshagentmisc

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

Misc

C2

http://graymatter.cc:444/agent.ashx

Attributes
  • mesh_id

    0xEC88772BDE938D10F83B3BF8AC505A02F97EC92A958202E7E8A6E3F918E4EAF1B8350DB086941B293B3A9CE2192C065B

  • server_id

    B87D14C679C9BC005DD544BACB5989D8928A2D5EBE240B42C94593358CD0B7255C33430268CC0B2AC967E698C6544D9B

  • wss

    wss://graymatter.cc:444/agent.ashx

Targets

    • Target

      2024-12-01_760b9213dd516c7716cea77360c473f0_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      760b9213dd516c7716cea77360c473f0

    • SHA1

      11e5dd8fd125dde38941c3cecfe0549472c4a171

    • SHA256

      7845abe430355e7cbe2f76c9f59ed53b658e1fea42cd0a87f0e6c2480bf7a184

    • SHA512

      13019add4111afec83065c5dd7c64bd49f2155b8b0df495cf6b961f2bd958a96dcc5eff5f28f5884e88b8d14018725f14a95d2ed65942aa878ba0e1209e1e278

    • SSDEEP

      49152:pX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QX:plRsZ47/QXoHUOfAoj1x6X

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks