Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2025-01-29...er.exe

windows7-x64

1

2025-01-29...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-29_2bea57bfa44319d713a652fb53cd70ae_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    250129-w3m8havkep

  • MD5

    2bea57bfa44319d713a652fb53cd70ae

  • SHA1

    3105c53001300c9ed84cf758035650b6302c1f10

  • SHA256

    120eb3dffba031b916b203565acc232a82d3d4aa0824dbce7780803487e62dfa

  • SHA512

    5aadc63348d390492fd01f8b28f0c02052a9bdaa9a1fbdef0a3cf045b3b958a5be4e0fb18b390fb30054ab757ee8271297b2071b1683b1907cbf51176679f634

  • SSDEEP

    49152:DX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qc:DlRsZ47/QXoHUOfAoj1x6c

Score
10/10
meshagenttacticalrmm_win

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

TacticalRMM_Win

C2

http://mesh.hulpvanopafstand.be:443/agent.ashx

Attributes
  • mesh_id

    0x6498BD766FC2C5A9032A712955A4A36902D5CF7A7C019832D365FAC05748F12CAE55A0F61EB0F427156389748D0E3C04

  • server_id

    550AA56F6E35CCA9A181134A417B4738B4260BDAA9CD9D27CD976D1538BE84AE715D214788F1B18B64F131B99EBD44ED

  • wss

    wss://mesh.hulpvanopafstand.be:443/agent.ashx

Targets

    • Target

      2025-01-29_2bea57bfa44319d713a652fb53cd70ae_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      2bea57bfa44319d713a652fb53cd70ae

    • SHA1

      3105c53001300c9ed84cf758035650b6302c1f10

    • SHA256

      120eb3dffba031b916b203565acc232a82d3d4aa0824dbce7780803487e62dfa

    • SHA512

      5aadc63348d390492fd01f8b28f0c02052a9bdaa9a1fbdef0a3cf045b3b958a5be4e0fb18b390fb30054ab757ee8271297b2071b1683b1907cbf51176679f634

    • SSDEEP

      49152:DX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qc:DlRsZ47/QXoHUOfAoj1x6c

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks