Overview

overview

10

Static

static

10

2025-02-01...er.exe

windows7-x64

1

2025-02-01...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-02-01_acdef2ec6902380d98a3c43f1d560266_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    250201-y7wrjsyngw

  • MD5

    acdef2ec6902380d98a3c43f1d560266

  • SHA1

    f50d49049a9d5abe135095441ce796043105c64c

  • SHA256

    fc9523a7fd54a7912fcb33618fb500c644017a91ee7b713ad56777db5d81b1b9

  • SHA512

    20ff56eea4bba32bce599257e515137fe6c3aa8396f351c398d1a4117fa88b6b7f90861611f558648654d34d62c19040357a867754781a2b61f093495630e77f

  • SSDEEP

    49152:WX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qi:WlRsZ47/QXoHUOfAoj1x6i

Score
10/10
meshagentnetwork

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

Network

C2

http://mcv2.duckdns.org:8443/agent.ashx

Attributes
  • mesh_id

    0xC2A1AB37D236C7B479448F46E5DA00EDE23D1B23202FE17D6EA7498CC8BACE26083A2145F8E25943ED1FED7FD1ED2F73

  • server_id

    BCEEBBBEC445FC2E6EDA790A26E056D2CF370DD85B04E6576FABED368243B563E7FDDB5F27F59C82162C91AA86D264B8

  • wss

    wss://mcv2.duckdns.org:8443/agent.ashx

Targets

    • Target

      2025-02-01_acdef2ec6902380d98a3c43f1d560266_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      acdef2ec6902380d98a3c43f1d560266

    • SHA1

      f50d49049a9d5abe135095441ce796043105c64c

    • SHA256

      fc9523a7fd54a7912fcb33618fb500c644017a91ee7b713ad56777db5d81b1b9

    • SHA512

      20ff56eea4bba32bce599257e515137fe6c3aa8396f351c398d1a4117fa88b6b7f90861611f558648654d34d62c19040357a867754781a2b61f093495630e77f

    • SSDEEP

      49152:WX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qi:WlRsZ47/QXoHUOfAoj1x6i

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks