Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-12-26...er.exe

windows7-x64

1

2024-12-26...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-26_331b28d2eee131e25b9db34aef2c4bdb_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    241226-v1w7ysspbj

  • MD5

    331b28d2eee131e25b9db34aef2c4bdb

  • SHA1

    5edf46e6c80b3df4a2bc44e4ae7effd2648f4bf0

  • SHA256

    3e9407ba5ff79a04dfa922a630d5147e625edf74532f7244e1272342d8e8bace

  • SHA512

    33336a6c50263cfafc8c85a78b70e58bbe56295ca29a317335ed63ca3920c6261c199676afa1f7fcc6e15edf327aabc5ff29c9bc45d5675b973bd359387c7f82

  • SSDEEP

    49152:VX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Q2:VlRsZ47/QXoHUOfAoj1x62

Score
10/10
meshagentlooney

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

looney

C2

http://mesh.cuero.cc:443/agent.ashx

Attributes
  • mesh_id

    0x874F479A0F8983C1B6C4104D8D8FBE0269EE7F35F141E02FDCE6E6CC2D50F5EC46A2226163E386A0A6AB1AB750221286

  • server_id

    ADE53DCC061162CAC6D07F4C751BCCEB6A75FD7571E2F8C30AF5D82A06984DA6F6976DABA071E0374733759A6BCBA077

  • wss

    wss://mesh.cuero.cc:443/agent.ashx

Targets

    • Target

      2024-12-26_331b28d2eee131e25b9db34aef2c4bdb_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      331b28d2eee131e25b9db34aef2c4bdb

    • SHA1

      5edf46e6c80b3df4a2bc44e4ae7effd2648f4bf0

    • SHA256

      3e9407ba5ff79a04dfa922a630d5147e625edf74532f7244e1272342d8e8bace

    • SHA512

      33336a6c50263cfafc8c85a78b70e58bbe56295ca29a317335ed63ca3920c6261c199676afa1f7fcc6e15edf327aabc5ff29c9bc45d5675b973bd359387c7f82

    • SSDEEP

      49152:VX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Q2:VlRsZ47/QXoHUOfAoj1x62

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks