Overview

overview

10

Static

static

10

2024-12-01...er.exe

windows7-x64

1

2024-12-01...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-01_ce90a8cb22de28578955ba90163aa30f_ismagent_ryuk_sliver

  • Size

    3.4MB

  • Sample

    241201-x5dbrayrcy

  • MD5

    ce90a8cb22de28578955ba90163aa30f

  • SHA1

    19036135b32fe97f3ce903b75844003af53f2f00

  • SHA256

    13576a1acae3afe030add98bae19baa542ea75b30e5aa569b75ac93d585b6d57

  • SHA512

    66489ee310a69e0dcf53899e2d0b6446a377096da48a7a2f3c5fbde420b25a8f68131247460de260006c8b196b093f6154debe9c11d03535f48b68c633297a01

  • SSDEEP

    49152:lX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQeg5W:llRsZ47/QXoHUOfAoj1Vs

Score
10/10
meshagentsrk

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

srk

C2

http://remoteshare.in:444/agent.ashx

Attributes
  • mesh_id

    0x2BE2DFAE36C3BA57528CB6EE486473D74A18F9A4FC763146B24E4C180639E02198F3105978617EBDAC1A16F5EA35CA83

  • server_id

    C6DE5260F3DF733E712F21316EE6EE643ABC568C44EC1AE991C57525DD26FAF883ED8D9A208F6CD34C3CC1CF7943ECD7

  • wss

    wss://remoteshare.in:444/agent.ashx

Targets

    • Target

      2024-12-01_ce90a8cb22de28578955ba90163aa30f_ismagent_ryuk_sliver

    • Size

      3.4MB

    • MD5

      ce90a8cb22de28578955ba90163aa30f

    • SHA1

      19036135b32fe97f3ce903b75844003af53f2f00

    • SHA256

      13576a1acae3afe030add98bae19baa542ea75b30e5aa569b75ac93d585b6d57

    • SHA512

      66489ee310a69e0dcf53899e2d0b6446a377096da48a7a2f3c5fbde420b25a8f68131247460de260006c8b196b093f6154debe9c11d03535f48b68c633297a01

    • SSDEEP

      49152:lX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQeg5W:llRsZ47/QXoHUOfAoj1Vs

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks