Overview

overview

10

Static

static

10

2025-01-27...er.exe

windows7-x64

1

2025-01-27...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-27_03a06393923a2ea380149f9923da8a8e_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    250127-v1mnhszmgn

  • MD5

    03a06393923a2ea380149f9923da8a8e

  • SHA1

    349bc20299fa808cd3c7f64b4ad376f5c50bb4f5

  • SHA256

    4d5433736dd64a78608965a6213220f2a3f3779f19d46be8c8e6aa0f5dbdbf98

  • SHA512

    49c158f36d072c189b25f116acff7b08f758e13d92b6f38c763871a1b7b0889f28a1e19f667c5f2f193fbfc11ffacf01d0986dbd0e1eaabd60871b8c6b939996

  • SSDEEP

    49152:LX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQef5f:LlRsZ47/QXoHUOfAoj1iN

Score
10/10
meshagentepb

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

EPB

C2

http://ec2-100-24-38-226.compute-1.amazonaws.com:443/agent.ashx

Attributes
  • mesh_id

    0x8394524FF8540F58DC8A9419A0A2C97FE56C74D794032FF00DE1F1576669525765A949D1BE629B8EBFA2141182F58830

  • server_id

    DB70C5BEF3B60ECA757B5BFC260FDB0483F57AA513F6397AC758C3FCCFF694B093B1C27765342A4AC5214AC9942E9B78

  • wss

    wss://ec2-100-24-38-226.compute-1.amazonaws.com:443/agent.ashx

Targets

    • Target

      2025-01-27_03a06393923a2ea380149f9923da8a8e_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      03a06393923a2ea380149f9923da8a8e

    • SHA1

      349bc20299fa808cd3c7f64b4ad376f5c50bb4f5

    • SHA256

      4d5433736dd64a78608965a6213220f2a3f3779f19d46be8c8e6aa0f5dbdbf98

    • SHA512

      49c158f36d072c189b25f116acff7b08f758e13d92b6f38c763871a1b7b0889f28a1e19f667c5f2f193fbfc11ffacf01d0986dbd0e1eaabd60871b8c6b939996

    • SSDEEP

      49152:LX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQef5f:LlRsZ47/QXoHUOfAoj1iN

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks