Overview

overview

10

Static

static

10

2024-12-30...er.exe

windows7-x64

1

2024-12-30...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-30_04e673aeef38d6c77e7d84e395cdbbaf_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    241230-y6zrtazmhv

  • MD5

    04e673aeef38d6c77e7d84e395cdbbaf

  • SHA1

    e1f4519ef2c5e68455247f6e7de9c48157f70506

  • SHA256

    dd51778683e0c7ca161ac7ebb323e9c4a0c916decc521365b2627e3e30be62fd

  • SHA512

    84129880f749144eb9c040f075e9999681089ecf2020abd31234b12c3434fccd0dc0d04aba0f1173919854675d0957985df571560b874dc9458e64884caa3c6e

  • SSDEEP

    49152:EX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qq:ElRsZ47/QXoHUOfAoj1x6q

Score
10/10
meshagentpix

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

pix

Attributes
  • mesh_id

    0xE174870BF4EC69ADCF8C904E4EF72EDDBE070F2E3C099D544A6148C6318AC5F3A2E9CF9653D4C9795DFAB3058079E688

  • server_id

    07BA60D3AEF446FEA5EE151578B0817A33F8D6C582AEA52752CDAE0936E6A4F10ADB4DEAF61226D3F101D5AAF6FC9164

  • wss

    localhost

Targets

    • Target

      2024-12-30_04e673aeef38d6c77e7d84e395cdbbaf_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      04e673aeef38d6c77e7d84e395cdbbaf

    • SHA1

      e1f4519ef2c5e68455247f6e7de9c48157f70506

    • SHA256

      dd51778683e0c7ca161ac7ebb323e9c4a0c916decc521365b2627e3e30be62fd

    • SHA512

      84129880f749144eb9c040f075e9999681089ecf2020abd31234b12c3434fccd0dc0d04aba0f1173919854675d0957985df571560b874dc9458e64884caa3c6e

    • SSDEEP

      49152:EX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qq:ElRsZ47/QXoHUOfAoj1x6q

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks