Overview

overview

10

Static

static

10

2025-01-15...er.exe

windows7-x64

1

2025-01-15...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-15_f5ba71eacca6cb3e9b4e63930b34f3f6_ismagent_ryuk_sliver

  • Size

    3.2MB

  • Sample

    250115-xwdwxstlel

  • MD5

    f5ba71eacca6cb3e9b4e63930b34f3f6

  • SHA1

    70e7c8012a00bf597d446907ea523b430c655b8f

  • SHA256

    cc9e920a275856886bae38af179cd926122babeac385f2129a11eedc82d5a455

  • SHA512

    88f871141c4256069f8b76e021c2d7909d9179f77712ee2b27e5ccbb72af4d2883172c1455e3a2cbc8ca4856aec42659c562586109409b47dc894bb7529dc999

  • SSDEEP

    49152:pX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQed:plRsZ47/QXoHUOfAoj1O

Score
10/10
meshagentr

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

r

C2

http://192.46.209.90:443/agent.ashx

Attributes
  • mesh_id

    0x2B5504A665DD96C231E0721ACDC38EAD3AE5FB502C6E410ADFA7246A4B3990B566A32A030E313B5F94CF51C09E455E00

  • server_id

    D7E1E797C9FC73A1BABB895A8CD7D9869162DF1935831047945A525EBDE66389DBB990B3AF7B14893BE3880072DC64F7

  • wss

    wss://192.46.209.90:443/agent.ashx

Targets

    • Target

      2025-01-15_f5ba71eacca6cb3e9b4e63930b34f3f6_ismagent_ryuk_sliver

    • Size

      3.2MB

    • MD5

      f5ba71eacca6cb3e9b4e63930b34f3f6

    • SHA1

      70e7c8012a00bf597d446907ea523b430c655b8f

    • SHA256

      cc9e920a275856886bae38af179cd926122babeac385f2129a11eedc82d5a455

    • SHA512

      88f871141c4256069f8b76e021c2d7909d9179f77712ee2b27e5ccbb72af4d2883172c1455e3a2cbc8ca4856aec42659c562586109409b47dc894bb7529dc999

    • SSDEEP

      49152:pX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQed:plRsZ47/QXoHUOfAoj1O

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks