Overview

overview

10

Static

static

10

2025-01-27...er.exe

windows7-x64

1

2025-01-27...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-27_f5f97b8ce058702803615431321c941c_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    250127-1pplmawpgz

  • MD5

    f5f97b8ce058702803615431321c941c

  • SHA1

    e9b9a6967292f441550c377effe1306f1228da09

  • SHA256

    70f306b85431def3ebe34c7b54d78661622c36e01dca16a9f652f2f56382a935

  • SHA512

    ef462f476715e7a7a7e539c366746de3fc7979633338764c197008f07e0ca9c96b3a36bab56cccd1792df4ebd3ed530f98907fe62fc5577a908039261b435d3e

  • SSDEEP

    49152:Uf708gNcR9l5NyQB7q1AlgraPgDLDVXI2RXgGfX2kMFvfAw6dZ7Nueuxg5AT:U+49lnyeG3D56gXm6HqT

Score
10/10
meshagentгруппа ргт 72659504it

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

Группа РГТ 72659504IT

C2

http://meshcent.its.ufanet.ru:443/agent.ashx

Attributes
  • mesh_id

    0x40B4EBDF66D90A52D36A57FECBE1445A63240529F4048B25A5655BF0E0475AC4ADD08A47A9D113D034E7308489F1D30F

  • server_id

    92361DD62E17552490F9968C444EAF21618626EC916098B7A27028E3759BECFC00603247A5829F7E5F230D03F82213BF

  • wss

    wss://meshcent.its.ufanet.ru:443/agent.ashx

Targets

    • Target

      2025-01-27_f5f97b8ce058702803615431321c941c_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      f5f97b8ce058702803615431321c941c

    • SHA1

      e9b9a6967292f441550c377effe1306f1228da09

    • SHA256

      70f306b85431def3ebe34c7b54d78661622c36e01dca16a9f652f2f56382a935

    • SHA512

      ef462f476715e7a7a7e539c366746de3fc7979633338764c197008f07e0ca9c96b3a36bab56cccd1792df4ebd3ed530f98907fe62fc5577a908039261b435d3e

    • SSDEEP

      49152:Uf708gNcR9l5NyQB7q1AlgraPgDLDVXI2RXgGfX2kMFvfAw6dZ7Nueuxg5AT:U+49lnyeG3D56gXm6HqT

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks