Overview

overview

10

Static

static

10

2024-12-17...er.exe

windows7-x64

1

2024-12-17...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-17_08f71cc10c2605b0f8ee8a423b0e02ad_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    241217-3bzwjsslbt

  • MD5

    08f71cc10c2605b0f8ee8a423b0e02ad

  • SHA1

    6212f26f0add304f3e746512a951d42e4dd48daf

  • SHA256

    fa5c98db95d7f5cb3577d72a950e23bd0839688f599270b5062c6f9be4704f84

  • SHA512

    bf7375053ba4705c41b8c4e43da4217c83a2b46e5bc3cb110ad0a33194ea90e13d059e46c7cb5d780ce277b534c454b280de80bc67e7f8b31ab0352e584a5bf2

  • SSDEEP

    49152:8X3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Q1:8lRsZ47/QXoHUOfAoj1x61

Score
10/10
meshagentbeth shipley law

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

Beth Shipley Law

C2

http://remote.tech-realms.com:443/agent.ashx

Attributes
  • mesh_id

    0x2941F4DFA6626B89B4546BA0708B1D3D2FBB31A94CBC26067E46DE2A82670792557B1BD8BDD6001D2A366A8AC90CBBA1

  • server_id

    4AEEA465E88842CA26A8DC1450532F8ED148A195E130DFE9119E81383FDA470EA29A2C897F2B9937BCC35EC3481012B0

  • wss

    wss://remote.tech-realms.com:443/agent.ashx

Targets

    • Target

      2024-12-17_08f71cc10c2605b0f8ee8a423b0e02ad_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      08f71cc10c2605b0f8ee8a423b0e02ad

    • SHA1

      6212f26f0add304f3e746512a951d42e4dd48daf

    • SHA256

      fa5c98db95d7f5cb3577d72a950e23bd0839688f599270b5062c6f9be4704f84

    • SHA512

      bf7375053ba4705c41b8c4e43da4217c83a2b46e5bc3cb110ad0a33194ea90e13d059e46c7cb5d780ce277b534c454b280de80bc67e7f8b31ab0352e584a5bf2

    • SSDEEP

      49152:8X3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Q1:8lRsZ47/QXoHUOfAoj1x61

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks