Overview

overview

10

Static

static

10

2025-02-01...er.exe

windows7-x64

1

2025-02-01...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-02-01_9c3d5b4ddca7f12476e4c316bba931c3_ismagent_ryuk_sliver

  • Size

    3.4MB

  • Sample

    250201-whsmgsvrcr

  • MD5

    9c3d5b4ddca7f12476e4c316bba931c3

  • SHA1

    adc9764ba395eb8bc2e1f0841601d9b58758df65

  • SHA256

    8555e6cb018381d622450d89778ff410ca545e59c9ec898dcedc32cf01785482

  • SHA512

    085a07550e548e00688610c34a2ded479d14a7bab4788d4e64b7f8d224b4cfd05ea425d35fa08ea39d61af43a1e1a689a2b5c8e62330fc066f25736cd6106313

  • SSDEEP

    49152:jX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe55bfxC:jlRsZ47/QXoHUOfAoj1gxfE

Score
10/10
meshagentgiusi

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

Giusi

C2

http://m.w3k.io:443/agent.ashx

Attributes
  • mesh_id

    0x6831E881583BCEC878D0CC9C5DA451088EB4B19C14A84DF79E855C5A56371B3108B7DD00B62EEF19FCE1CADAC09D30C8

  • server_id

    B2EC70546B43CF1D1137B8FCF6B9C267BA53725DDDD8A1254A749BB9306C7FA1C2E923D314FAA4A25550CAA2B23F9084

  • wss

    wss://m.w3k.io:443/agent.ashx

Targets

    • Target

      2025-02-01_9c3d5b4ddca7f12476e4c316bba931c3_ismagent_ryuk_sliver

    • Size

      3.4MB

    • MD5

      9c3d5b4ddca7f12476e4c316bba931c3

    • SHA1

      adc9764ba395eb8bc2e1f0841601d9b58758df65

    • SHA256

      8555e6cb018381d622450d89778ff410ca545e59c9ec898dcedc32cf01785482

    • SHA512

      085a07550e548e00688610c34a2ded479d14a7bab4788d4e64b7f8d224b4cfd05ea425d35fa08ea39d61af43a1e1a689a2b5c8e62330fc066f25736cd6106313

    • SSDEEP

      49152:jX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe55bfxC:jlRsZ47/QXoHUOfAoj1gxfE

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks