Overview

overview

10

Static

static

10

2024-12-14...er.exe

windows7-x64

1

2024-12-14...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-14_720fa9cb6dce9858dc211b5821b985f1_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    241214-w4232sslcl

  • MD5

    720fa9cb6dce9858dc211b5821b985f1

  • SHA1

    93991cf85133dcd466264400b4ac7381e9f187c8

  • SHA256

    50e9611a9a98868ac4f9018b092b56f74f35d9fc98b5a211f6654d1f291cdd31

  • SHA512

    18cf876e558aae289e7bd6974c4b6f10d853ac9df186f68946f0db48b6c6570c55ec57481f71b61b0ead8b80bfa73aee2147bcb96c92fd3698d7a1eaae9f8ef1

  • SSDEEP

    49152:uX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Ql:ulRsZ47/QXoHUOfAoj1x6l

Score
10/10
meshagentfamille

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

Famille

C2

http://meshcentral.susunnection.be:443/agent.ashx

Attributes
  • mesh_id

    0xD330462F50628F54742A20E8A0DBD0B8FCE2A1DFC892CD0BDD4E497BAB8AC759E5D3ECA2FB31B14A6833145FDF120971

  • server_id

    EF17B054DBE3B204018AEAAA4B861A940E9E6184E8736F38C506939F3B531D7761BDF76767F6FCA2332F85FEBA54C1C2

  • wss

    wss://meshcentral.susunnection.be:443/agent.ashx

Targets

    • Target

      2024-12-14_720fa9cb6dce9858dc211b5821b985f1_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      720fa9cb6dce9858dc211b5821b985f1

    • SHA1

      93991cf85133dcd466264400b4ac7381e9f187c8

    • SHA256

      50e9611a9a98868ac4f9018b092b56f74f35d9fc98b5a211f6654d1f291cdd31

    • SHA512

      18cf876e558aae289e7bd6974c4b6f10d853ac9df186f68946f0db48b6c6570c55ec57481f71b61b0ead8b80bfa73aee2147bcb96c92fd3698d7a1eaae9f8ef1

    • SSDEEP

      49152:uX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Ql:ulRsZ47/QXoHUOfAoj1x6l

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks