Overview

overview

10

Static

static

10

2024-12-19...er.exe

windows7-x64

1

2024-12-19...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-19_4c88a73e40d540561b41d914d82851ed_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    241219-p3dwhatkgy

  • MD5

    4c88a73e40d540561b41d914d82851ed

  • SHA1

    4160342f9c13ed719693c0e7a753025a861a29c2

  • SHA256

    78852fc8837d3f3a11d10ef132e0a56730cd7ddcbb31ca4cd0037f8f4ca9ff2f

  • SHA512

    fcefd0d018d0ffce3ea18cebc2755d103e8915aa8e78847f035d337c6402e0acb1a477c6bb7297f3da92d57f014f36154d8490a229b4070efc04106e94ca9151

  • SSDEEP

    49152:Mf708gNcR9l5NyQB7q1AlgraPgDLDVXI2RXgGfX2kMFvfAw6dZ7Nueuxg5A7:M+49lnyeG3D56gXm6Hq7

Score
10/10
meshagent1с 24 градуса

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

1С 24 Градуса

C2

http://meshcent.its.ufanet.ru:443/agent.ashx

Attributes
  • mesh_id

    0x802D9EA2930D0B5048E14F99D45CE565A1BAD6C611565E53A34657314BA88BF1F0AF46BEC9DEADDD53ED587D6057CFB9

  • server_id

    92361DD62E17552490F9968C444EAF21618626EC916098B7A27028E3759BECFC00603247A5829F7E5F230D03F82213BF

  • wss

    wss://meshcent.its.ufanet.ru:443/agent.ashx

Targets

    • Target

      2024-12-19_4c88a73e40d540561b41d914d82851ed_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      4c88a73e40d540561b41d914d82851ed

    • SHA1

      4160342f9c13ed719693c0e7a753025a861a29c2

    • SHA256

      78852fc8837d3f3a11d10ef132e0a56730cd7ddcbb31ca4cd0037f8f4ca9ff2f

    • SHA512

      fcefd0d018d0ffce3ea18cebc2755d103e8915aa8e78847f035d337c6402e0acb1a477c6bb7297f3da92d57f014f36154d8490a229b4070efc04106e94ca9151

    • SSDEEP

      49152:Mf708gNcR9l5NyQB7q1AlgraPgDLDVXI2RXgGfX2kMFvfAw6dZ7Nueuxg5A7:M+49lnyeG3D56gXm6Hq7

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks