Overview

overview

10

Static

static

10

2025-01-23...er.exe

windows7-x64

1

2025-01-23...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-23_fd397ba7cabd6e18d53bd21d000314fd_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    250123-pqpr8szme1

  • MD5

    fd397ba7cabd6e18d53bd21d000314fd

  • SHA1

    b457a37fca6a35bc1d3fe8c9b39bdc55c8c1273b

  • SHA256

    724b5cedca11e55a6ae4ce603fbfe99987c323d6a5566c502e6e2ceea654d2c0

  • SHA512

    fb215980e6cc17d08f875ee0f3fa5fb10f933e6c465db121cf79806c32822a1d139238fc2f463142da95cf1c878682a1d4808d199477a05a69d7ec5a2f2055af

  • SSDEEP

    49152:1X3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QX:1lRsZ47/QXoHUOfAoj1x6X

Score
10/10
meshagentgeneral

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

General

C2

http://mesh.pc-support.uk.com:443/agent.ashx

Attributes
  • mesh_id

    0x1723FBDB0682F9072A146E497A9A439C5F27750F7329C9DDFB47ECA292E9A08D756F9939C4427F30E299DE221E6C8ADF

  • server_id

    FDF9C0A0D764BBC8C1E7C5094656BD68D0906FD7F6036B7CEE3D3C01BBE3007FBB3C18282CEA2F3EE13AC8050388E70B

  • wss

    wss://mesh.pc-support.uk.com:443/agent.ashx

Targets

    • Target

      2025-01-23_fd397ba7cabd6e18d53bd21d000314fd_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      fd397ba7cabd6e18d53bd21d000314fd

    • SHA1

      b457a37fca6a35bc1d3fe8c9b39bdc55c8c1273b

    • SHA256

      724b5cedca11e55a6ae4ce603fbfe99987c323d6a5566c502e6e2ceea654d2c0

    • SHA512

      fb215980e6cc17d08f875ee0f3fa5fb10f933e6c465db121cf79806c32822a1d139238fc2f463142da95cf1c878682a1d4808d199477a05a69d7ec5a2f2055af

    • SSDEEP

      49152:1X3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QX:1lRsZ47/QXoHUOfAoj1x6X

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks