Overview

overview

10

Static

static

10

2025-01-13...er.exe

windows7-x64

1

2025-01-13...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-13_9d1944a152358421809eb85d92a70069_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    250113-hcmmdssqhl

  • MD5

    9d1944a152358421809eb85d92a70069

  • SHA1

    29be9ac27e3192fe992204ecd08b13f31d435033

  • SHA256

    75a4e492ab9ee9912021beb7c31975fbd91ca9cc31a9b754f7e7c4de23e06682

  • SHA512

    eeb12ff05ac9a1fe46cb95dc3fc3eeb0311c7f35ebeb7347c030304724005ffd9c37c2c58a99715fcb2fc7c6b748013055f2827de31d90ad74cf6a341c146c13

  • SSDEEP

    49152:OX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QW:OlRsZ47/QXoHUOfAoj1x6W

Score
10/10
meshagentosborne family enterprises

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

Osborne Family Enterprises

C2

http://remote.hnetsolutions.com:443/agent.ashx

Attributes
  • mesh_id

    0x6F2E6085CD23E184C15D509C9D3688FAC7CFB4BCA85E7E75A2429D0E7416FB3FD2E9A525D16FFDA689F866BAE6531803

  • server_id

    1D1BF736685EF3672EF7852CBB92F0E75E6831C6DB67E3CF169F54AA446A0DCAFFA3CE637ED3D1D557906901C279674F

  • wss

    wss://remote.hnetsolutions.com:443/agent.ashx

Targets

    • Target

      2025-01-13_9d1944a152358421809eb85d92a70069_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      9d1944a152358421809eb85d92a70069

    • SHA1

      29be9ac27e3192fe992204ecd08b13f31d435033

    • SHA256

      75a4e492ab9ee9912021beb7c31975fbd91ca9cc31a9b754f7e7c4de23e06682

    • SHA512

      eeb12ff05ac9a1fe46cb95dc3fc3eeb0311c7f35ebeb7347c030304724005ffd9c37c2c58a99715fcb2fc7c6b748013055f2827de31d90ad74cf6a341c146c13

    • SSDEEP

      49152:OX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QW:OlRsZ47/QXoHUOfAoj1x6W

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks