General

  • Target

    2024-12-12_f568ac800850fa7a270e919b360ee389_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    241212-x52pcawrfn

  • MD5

    f568ac800850fa7a270e919b360ee389

  • SHA1

    6cb4ed00be57b7a7cee8cdc290a1faaf1e9d5334

  • SHA256

    7a72341ec78ec27208c6708745d9eb6727008a55207e4074b7c074f1f92043ff

  • SHA512

    a4b93c0eda821eb8cd204f006205ebd764f91bba95a1deffa791a88982cf34afefc6a9fd237f2e925f092525a1454087c3a6f86fe0fdae4a2a12b50654a088e1

  • SSDEEP

    49152:8f708gNcR9l5NyQB7q1AlgraPgDLDVXI2RXgGfX2kMFvfAw6dZ7Nueuxg5Au:8+49lnyeG3D56gXm6Hqu

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

ПНИ Раздолье(88053823UL)

C2

http://meshcent.its.ufanet.ru:443/agent.ashx

Attributes
  • mesh_id

    0x16A0A21B66C0076D18829825F0EFF35E1BA79A168E3C3DAE254CC980A3C886C72D63A2EBCCE8B12CBA2D17872B88D99C

  • server_id

    92361DD62E17552490F9968C444EAF21618626EC916098B7A27028E3759BECFC00603247A5829F7E5F230D03F82213BF

  • wss

    wss://meshcent.its.ufanet.ru:443/agent.ashx

Targets

    • Target

      2024-12-12_f568ac800850fa7a270e919b360ee389_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      f568ac800850fa7a270e919b360ee389

    • SHA1

      6cb4ed00be57b7a7cee8cdc290a1faaf1e9d5334

    • SHA256

      7a72341ec78ec27208c6708745d9eb6727008a55207e4074b7c074f1f92043ff

    • SHA512

      a4b93c0eda821eb8cd204f006205ebd764f91bba95a1deffa791a88982cf34afefc6a9fd237f2e925f092525a1454087c3a6f86fe0fdae4a2a12b50654a088e1

    • SSDEEP

      49152:8f708gNcR9l5NyQB7q1AlgraPgDLDVXI2RXgGfX2kMFvfAw6dZ7Nueuxg5Au:8+49lnyeG3D56gXm6Hqu

    Score
    1/10

MITRE ATT&CK Matrix

Tasks