Overview

overview

10

Static

static

10

2025-01-20...er.exe

windows7-x64

1

2025-01-20...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-20_413d21d1deb2f30f70badf8deb9e0003_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    250120-pr7dnsyrbt

  • MD5

    413d21d1deb2f30f70badf8deb9e0003

  • SHA1

    d3280e99048570a50b7d5898fdd0db1c6b2f31e5

  • SHA256

    9b39c352b778b709d9f40411890dfc976571ec5dec08df1af894d3927634ea5a

  • SHA512

    c26b0c1c36fc613295882732f81245bc08c26ff8ed3ecbcbfcc4359bf91486051078185a7cb50c106c372ffbb0d5b9f14fa4a6f1dbf4aa8e173dfbcef512cdca

  • SSDEEP

    49152:Mf708gNcR9l5NyQB7q1AlgraPgDLDVXI2RXgGfX2kMFvfAw6dZ7Nueuxg5Ax:M+49lnyeG3D56gXm6Hqx

Score
10/10
meshagentальянс групп

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

Альянс групп

C2

http://meshcent.its.ufanet.ru:443/agent.ashx

Attributes
  • mesh_id

    0x40C1B70D862A370CE6EC82353F3346164BC6FA484651AC57F0658943E10809B9103F4947B71C3D8C4865652B9F9B1F12

  • server_id

    92361DD62E17552490F9968C444EAF21618626EC916098B7A27028E3759BECFC00603247A5829F7E5F230D03F82213BF

  • wss

    wss://meshcent.its.ufanet.ru:443/agent.ashx

Targets

    • Target

      2025-01-20_413d21d1deb2f30f70badf8deb9e0003_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      413d21d1deb2f30f70badf8deb9e0003

    • SHA1

      d3280e99048570a50b7d5898fdd0db1c6b2f31e5

    • SHA256

      9b39c352b778b709d9f40411890dfc976571ec5dec08df1af894d3927634ea5a

    • SHA512

      c26b0c1c36fc613295882732f81245bc08c26ff8ed3ecbcbfcc4359bf91486051078185a7cb50c106c372ffbb0d5b9f14fa4a6f1dbf4aa8e173dfbcef512cdca

    • SSDEEP

      49152:Mf708gNcR9l5NyQB7q1AlgraPgDLDVXI2RXgGfX2kMFvfAw6dZ7Nueuxg5Ax:M+49lnyeG3D56gXm6Hqx

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks