Overview

overview

10

Static

static

10

2024-12-17...er.exe

windows7-x64

1

2024-12-17...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-17_1c9f5cc3c46a5cb4ad29be0e0d3547d3_ismagent_ryuk_sliver

  • Size

    3.4MB

  • Sample

    241217-rr5k7a1pex

  • MD5

    1c9f5cc3c46a5cb4ad29be0e0d3547d3

  • SHA1

    7ed693d57506275243315d92a09f3fe08e914e67

  • SHA256

    984e0cfb936d3c4174b67d801a0e93a7c894e4031c121e625901aee5db184e20

  • SHA512

    0ac3e68f06fdca5058469237302982ef9095bd2ea3a15db44d6edc3832eb6a7370722082d6f7e3a6fb31ee11c2239fd8e64564a0cd8a30a6cff2a38e0004219b

  • SSDEEP

    49152:odZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/wZ7IbOjx85l:MHvfGfZvZj1/N/z/A8H

Score
10/10
meshagentkishore

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

kishore

C2

http://remoteshare.in:444/agent.ashx

Attributes
  • mesh_id

    0x2F6ABDB25FC9365AA312CAC06F7F9066F6BA8BCF68543847FC479A2FEDC33E71189789DE302E26925FD0BE60B83C87AB

  • server_id

    C6DE5260F3DF733E712F21316EE6EE643ABC568C44EC1AE991C57525DD26FAF883ED8D9A208F6CD34C3CC1CF7943ECD7

  • wss

    wss://remoteshare.in:444/agent.ashx

Targets

    • Target

      2024-12-17_1c9f5cc3c46a5cb4ad29be0e0d3547d3_ismagent_ryuk_sliver

    • Size

      3.4MB

    • MD5

      1c9f5cc3c46a5cb4ad29be0e0d3547d3

    • SHA1

      7ed693d57506275243315d92a09f3fe08e914e67

    • SHA256

      984e0cfb936d3c4174b67d801a0e93a7c894e4031c121e625901aee5db184e20

    • SHA512

      0ac3e68f06fdca5058469237302982ef9095bd2ea3a15db44d6edc3832eb6a7370722082d6f7e3a6fb31ee11c2239fd8e64564a0cd8a30a6cff2a38e0004219b

    • SSDEEP

      49152:odZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/wZ7IbOjx85l:MHvfGfZvZj1/N/z/A8H

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks