Overview

overview

10

Static

static

10

2025-01-14...er.exe

windows7-x64

1

2025-01-14...er.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    2025-01-14_08bd17c65fabd3ff98eb381fa266bc27_ismagent_ryuk_sliver
  • Size 3.3MB
  • Sample250114-s186ea1rez
  • SHA256 7ec2abc3e780440b44ae302f34ef0f11073c49455d425188380a053d204a6978
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
meshagenttacticalrmm

Malware Config

Extracted

Family

  • meshagent

Version

  • 2

Botnet

  • TacticalRMM

C2

  • http://mesh.nonocloud.tech:443/agent.ashx

Attributes
  • mesh_id

    0x91EB250AE236D5A2C5856923071A7233A5B7FEEAF6D614C521F5C870C932CA12BF999C9CAD916D39A1D321C47DE7E424

  • server_id

    7A727A11AF451477BA09BB458F533DD79047A36093FDBCD488F27D8EE1030BCFBA558A8CC01F383C6033337985379B96

  • wss

    wss://mesh.nonocloud.tech:443/agent.ashx

Targets

    • Target
      2025-01-14_08bd17c65fabd3ff98eb381fa266bc27_ismagent_ryuk_sliver
    • Size 3.3MB
    • SHA256 7ec2abc3e780440b44ae302f34ef0f11073c49455d425188380a053d204a6978
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks