Overview

overview

10

Static

static

10

2025-01-13...er.exe

windows7-x64

1

2025-01-13...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-13_0bd1879439b58c59b6e922ed4b8cfb67_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    250113-r53czsxrbk

  • MD5

    0bd1879439b58c59b6e922ed4b8cfb67

  • SHA1

    076727946efbf87bff44b4ea4854ecbdd15b90f3

  • SHA256

    3e99f285bbea4b8334ef2fe626e464e9b44fbc6f39819d725d3fb99c622311dc

  • SHA512

    48043df28c5b2aa2bb8cf33e802e6e33d8a4adea286fa4b1d8e02c4a2e04a9f50e3e9c18e86656aae91ab099c9eb36ff35d4528f939e22ef6414c27dd993d7a7

  • SSDEEP

    49152:UX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQeG5O:UlRsZ47/QXoHUOfAoj1bs

Score
10/10
meshagentmain

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

main

C2

http://m.iteams.ru:443/agent.ashx

Attributes
  • mesh_id

    0x09EA9A9881D6D80DB68CBB386963DF3774257BFE8E098FF79FD2FAFEC6B9A878E5AA1AE9CB2C0171AD05FDBD6939E6CB

  • server_id

    3CE8E390E3DC3131663B434A8A3904987B2B0E366ABFCB6D0F8352A39F99C1200CBD3EB1E5D0405B139D981A5ABE6FBB

  • wss

    wss://m.iteams.ru:443/agent.ashx

Targets

    • Target

      2025-01-13_0bd1879439b58c59b6e922ed4b8cfb67_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      0bd1879439b58c59b6e922ed4b8cfb67

    • SHA1

      076727946efbf87bff44b4ea4854ecbdd15b90f3

    • SHA256

      3e99f285bbea4b8334ef2fe626e464e9b44fbc6f39819d725d3fb99c622311dc

    • SHA512

      48043df28c5b2aa2bb8cf33e802e6e33d8a4adea286fa4b1d8e02c4a2e04a9f50e3e9c18e86656aae91ab099c9eb36ff35d4528f939e22ef6414c27dd993d7a7

    • SSDEEP

      49152:UX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQeG5O:UlRsZ47/QXoHUOfAoj1bs

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks