Overview

overview

10

Static

static

10

2024-12-17...er.exe

windows7-x64

1

2024-12-17...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-17_ba3cb628f33d6c14ec540925e68cedd3_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    241217-f2qdga1rg1

  • MD5

    ba3cb628f33d6c14ec540925e68cedd3

  • SHA1

    735e448b3b3fb08c4b627e4a5a68ed27920e1d57

  • SHA256

    3ea4ab21a5d7ef0179a6831c829c1bc4749c896edc6d3675fab4a55b0b6acd6b

  • SHA512

    a0c422ac689ba690cf56c378effc556b397e52f0d58bef3d50c74100abf0c3441dd9242080938be78df3b29072a70c92c26158f3e643b8b7e3a65d07d3cfc4c8

  • SSDEEP

    49152:RX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qn:RlRsZ47/QXoHUOfAoj1x6n

Score
10/10
meshagenthome

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

Home

C2

http://meshcentral.kowantify.com:443/agent.ashx

Attributes
  • mesh_id

    0x3E9C1137BBD59759FD0CB63C48D0B79E4ED8D685F163D4F221070ABE7BB1146E2D76AD694C010905AD0BAD79043FF644

  • server_id

    F6CA5E7213425F0E1112B320DF5242556279FEDF476F5BA5B068ED18467260DB4B3B7F8FF58741F1B4FC9CCD82CABC9F

  • wss

    wss://meshcentral.kowantify.com:443/agent.ashx

Targets

    • Target

      2024-12-17_ba3cb628f33d6c14ec540925e68cedd3_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      ba3cb628f33d6c14ec540925e68cedd3

    • SHA1

      735e448b3b3fb08c4b627e4a5a68ed27920e1d57

    • SHA256

      3ea4ab21a5d7ef0179a6831c829c1bc4749c896edc6d3675fab4a55b0b6acd6b

    • SHA512

      a0c422ac689ba690cf56c378effc556b397e52f0d58bef3d50c74100abf0c3441dd9242080938be78df3b29072a70c92c26158f3e643b8b7e3a65d07d3cfc4c8

    • SSDEEP

      49152:RX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qn:RlRsZ47/QXoHUOfAoj1x6n

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks